Have symptom for a host system "message event". Alert gets generated when symptom is triggered and notification is setup to send an snmp trap. Not concerned with host system that alerts once per day for issue. Trying to configure to send notification trap only when host system experiences the alert multiple times per day.
the only way i can think of is through log insight if you have it as it is a query based alerting and if you want send it to vrops