Обнаружилось что actions выполняется после срабатывания триггера...
Для этого пришлось переставить сервер в 4 режим дебага, и сделать tail -f zabbix-server.log пришлось так...
вот там и обнаруужилось:009336:20080430:114922 Conditions are TRUE
009336:20080430:114922 Conditions match our trigger. Do apply actions.
009336:20080430:114922 In substitute_macros([{HOSTNAME}/{IPADDRESS}:
Date occurred at {DATE}
Time occurred: {TIME}
Severety: {TRIGGER.SEVERITY}
Executed by: {TRIGGER.NAME}
Status: {TRIGGER.STATUS}])
009336:20080430:114922 In substitute_simple_macros [{HOSTNAME}/{IPADDRESS}:
Date occurred at {DATE}
Time occurred: {TIME}
Severety: {TRIGGER.SEVERITY}
Executed by: {TRIGGER.NAME}
Status: {TRIGGER.STATUS}]
009336:20080430:114922 Executing query:select distinct h.host from triggers t, functions f,items i, hosts h where t.triggerid=12362 and f.triggerid=t.triggerid and f.itemid=i.itemid and h.hostid=i.hostid
009336:20080430:114922 Executing query:select distinct h.ip from triggers t, functions f,items i, hosts h where t.triggerid=12362 and f.triggerid=t.triggerid and f.itemid=i.itemid and h.hostid=i.hostid and h.useip=1
009336:20080430:114922 In substitute_simple_macros [Apache is not running on server {HOSTNAME}]
009336:20080430:114922 Executing query:select distinct h.host from triggers t, functions f,items i, hosts h where t.triggerid=12362 and f.triggerid=t.triggerid and f.itemid=i.itemid and h.hostid=i.hostid
009336:20080430:114922 Result expression [Apache is not running on server myhost]
009336:20080430:114922 Result expression [myhost/127.0.0.1:
Date occurred at 2008.04.30
Time occurred: 11:49:22
Severety: Average
Executed by: Apache is not running on server myhost
Status: ON]
009336:20080430:114922 Result expression:myhost/127.0.0.1:
Date occurred at 2008.04.30
Time occurred: 11:49:22
Severety: Average
Executed by: Apache is not running on server myhost
Status: ON
009336:20080430:114922 In substitute_macros([{HOSTNAME}/{TRIGGER.NAME}: {STATUS}])
009336:20080430:114922 In substitute_simple_macros [{HOSTNAME}/{TRIGGER.NAME}: {STATUS}]
009336:20080430:114922 Executing query:select distinct h.host from triggers t, functions f,items i, hosts h where t.triggerid=12362 and f.triggerid=t.triggerid and f.itemid=i.itemid and h.hostid=i.hostid
009336:20080430:114922 In substitute_simple_macros [Apache is not running on server {HOSTNAME}]
009336:20080430:114922 Executing query:select distinct h.host from triggers t, functions f,items i, hosts h where t.triggerid=12362 and f.triggerid=t.triggerid and f.itemid=i.itemid and h.hostid=i.hostid
009336:20080430:114922 Result expression [Apache is not running on server myhost]
009336:20080430:114922 Result expression [myhost/Apache is not running on server myhost: ON]
009336:20080430:114922 Result expression:myhost/Apache is not running on server myhost: ON
009336:20080430:114922 Executing query:select mediatypeid,sendto,active,severity,period from media where active=0 and userid=1
009336:20080430:114922 Actions applied for trigger 12362 1
009336:20080430:114922 Executing query:update services set status=3 where triggerid=12362
009336:20080430:114922 Executing query:select serviceid from services where triggerid=12362
009336:20080430:114922 End of update_triggers [17542]
Но в Monitoring -> Actions : No actions found
Теперь ничего не могу найти про мыло... или обнаружить запрос связанный с ним хотя бы...