status_event equals warning
Device Match:
hostname match blabla
Entity Match:
status_descr match *primary*