Kindest regards.

One of non trivial solutions can be:
Create script DCI that will return 1 if threshold should be generated and 0 if deactivation event should be generated. And count everything by yourselves(it should be working but "dirty" solution).

Something like this(have not tested this):
value = GetDCIValue($node, FindDCIByName($node, "Agent log status"));
if(value != null)
{
    attr = GetCustomAttribute($node, "NormalStateSampleCount");
    count = 5;
    if(attr != null)
    {
        count = int32(attr);
    }
    if(int32(value) > 5) //Activation event should be generated
    {
        SetCustomAttribute($node, "NormalStateSampleCount", "0");
        return 1;
    }
    
    if(int32(value) < 5)
    {
        count++;
        SetCustomAttribute($node, "NormalStateSampleCount", "0");
        if(count == 5) //Deactivation event should be generated
        {
            return 0;
        }
        return 1;
    }
}

SetCustomAttribute($node, "NormalStateSampleCount", "0");
return 1;