The snmptrap alert is not sending an OK when the trigger has returned to normal.
stream // Select just the cpu measurement from our example database. |from() .measurement('cpu') // Create a new field called usage_busy |eval(lambda: 100.0 - "usage_idle") .as('usage_busy') // Send alerts |alert() // .warn(lambda: sigma("usage_idle") > 2) // .crit(lambda: sigma("usage_idle") > 3) .warn(lambda: "usage_busy" > 1) .warnReset(lambda: "usage_busy" <= 1) .crit(lambda: "usage_busy" > 2) .critReset(lambda: "usage_busy" <= 2) // Whenever we get an alert write it to a file. .log('/tmp/alerts.log') // Send SNMP Trap .snmpTrap('1.3.6.1.4.1.1') .data('1.3.6.1.4.1.1.5', 's', '{{ .Level }}') .data('1.3.6.1.4.1.1.6', 'i', '{{ index .Fields "usage_busy" }}') .data('1.3.6.1.4.1.1.8', 's', '{{ .ID }}:{{ .Level }}')