Use literal map syntax
Don't set TTL until there's definitely an event
Rewrite for updated nagios formats

Attempt to determine a reasonable TTL for the event.  This really
needs to be averaged…