email filter

[algae]

Hi, I'm trying to configure an email that will email me new events that have 5 or more alarm frames. The filter specifies date/time as greater than or equal to "now". If i understand correctly, "now" is the time when the filter was last reloaded (every 5 minutes). I'm getting most of the matching events emailed to me but not all. Any suggestions for the best way to configure this filter? thanks.

[dmitripr]

Instead of "now" try "-1 hour".

[algae]

Thanks. I'll try that. But couldn't I end up getting duplicate events emailed?

[dmitripr]

You shouldn't. ZM marks the events that were emailed in the database.

[algae]

Thanks. -1 hour works better and I am not getting duplicates.