ok, so it is working now: small change, removed the 1024 division:
(here.hw.totalMemory * 0.30)
Now, event messages arent being transformed, from what i can see the line 'match = re.search' needs to be altered to match the message, did that but still get:
threshold of MEM not met: current value 161252760.000000
this is the original transform taht i found in the forum:
------------------------------------------------------------------------------------------------------------------------------------
import re
match = re.search('threshold of Free Memory [^:]+: current value ([\d\.]+)', evt.message)
if match and device:
avail = float(match.groups()[0]) * 1024
total = device.hw.totalMemory
percent_used = (1 - (avail / total)) * 100
evt.summary = "Memory threshold exceeded: current value %3.1f%%" % (percent_used)
------------------------------------------------------------------------------------------------------------------------------------
please advise what must i change so the transform will match?