Using global filters

Administrators and users can create global or advanced filters and make them accessible to all users who are logged on to the server where the filters were created.

Global or advanced filters are available for the Event Collectors event folder and all its subnodes. These filters are not available for the Abnormalities event folder and all the component folders: Groups, Services, Devices, and Monitors and all the drill-downs associated with all the component folders.

By default, the advanced filter selected in the filters panel is applied to the event list. You can use these filters to adjust the view of the event list just as you use the quick filters.

To create a filter

1. In the filters panel, click Advanced Filters .
2. Click Create New Filter .
3. Click the down arrow next to the Class list.
4. Select an event class, and then click .
5. To filter events according to one or more event attributes, specify the following information for each attribute:
   1. (Optional) Select a left parenthesis or a NOT condition.
   2. Select an event attribute.
   3. Select a comparison operator.
   4. Enter a value against which you want the filter to compare.
   5. (Optional) Select a right parenthesis.

   6. To add another filter condition (event attribute), click .

      Tip

      To remove a filter condition, click in the corresponding filter condition row.

   7. Select a logical operator, AND or OR.
   8. Repeat list item through list item to add as many filter conditions as you want.
6. {Click Save.
7. In the Enter Filter Name dialog box, enter a name for the filter, and then click OK.
8. Click OK.
   The new filter is displayed in the Name list.

To apply an out-of-the-box-or user-defined filter

1. In the filters panel, click Advanced Filters.
2. Click the down arrow next to the Name list.
3. Select a filter.
4. In the Filter Change Confirmation dialog box, click Yes.
   
   The selected filter is applied to the event list.

To apply a filter without saving changes

1. In the filters panel, click Advanced Filters.
2. Click the down arrow next to the Name list.
3. Select a filter.
4. Modify one or more filter conditions.

5. Click Apply.

   Note

   The conditions that you change in an existing filter are not saved until you click Save.

To clear a filter

1. In the filters panel, click Advanced Filters.
2. Click the down arrow next to the Name list.
3. Select a filter.
4. Modify one or more filter conditions.
5. To clear a filter condition, click Start Over.
   
   The modified filter conditions are discarded and the original filter is applied to the event list.

To cancel a filter

1. In the filters panel, click Advanced Filters.
2. Click the down arrow next to the Name list.
3. Select a filter.
4. Click Cancel.
5. In the Cancel Filter Confirmation dialog box, click Yes.
   
   The most recently applied filter is canceled and the previously selected filter is applied to the event list.

To delete a filter

1. In the filters panel, click Advanced Filters.
2. Click the down arrow next to the Name list.
3. Select a filter.
4. Click Delete .
5. In the Filter Delete Confirmation dialog box, click Yes.

6. Click OK.
   The selected filter is removed from the Name list.

   Note

   Administrators and other users can delete user-defined filters they create. However, neither an administrator nor other users can delete default or out-of-the-box filters.