Why… just why you have a different syntax for trigger and re-trigger alerts?
[Re-Triggered on {device:/dev/xvda1,host:testing.blabla.internal}] [testing] Disk space low testing.blabla.internal 192.168.15.43
[Triggered on device:/dev/xvda1,host:testing.blabla.internal] [testing] Disk space low testing.blabla.internal192.168.15.43
Of course, humans never make inattention errors, that can pass QA and leak in prod.
Fuck my life… with Regex!