Unsupported contentThis version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments.

Filtering events

To prioritize and quickly take action on events, you can use the built-in filters or you can create your own custom filters for advanced options.

You can use the following types of filters:

Filter type

Description

Quick and easy way to filter events by severity and status

Filter events based on when they occurred

For advanced filtering like viewing events from specific devices, groups, or applications

Quick filters

The quick filters provide an easy way to filter events.

events_QuickFilters.png

Event status row callout_1.PNG: Select the event status that you want to view. You can select more than one event status. To consider all events, irrespective of status, clear all the event status boxes.

Event severity row callout_2.PNG: Select the event severity that you want to view. You can select more than one event severity. To consider all events, irrespective of severity, clear all the event severity boxes.

Note

The number of events displayed in the event severity row depends on the selected event status. When you change the event status selection, the number of events displayed in the event severity row is updated automatically.

Tip

The event status and event severity filters work in conjunction and events that meet both filter criteria are displayed.

For example, if you select Open and Assigned from the event status filter and select Critical and Major from the event severity filter, the result displays the list of events with open or assigned status with critical or major severity.

To save and restore your quick filters preference

  1. Select the desired event status and event severity.
  2. From the Events action menu, select Save As Preference callout_1.PNG.
    The quick filters settings are saved and retained. Every time you log in to the Operations Management console and navigate to the Events page, the saved quick filters setting is applied.
    events_RestoreQuickFilter.png

  3. To restore the default quick filters, select Restore Default Filters callout_2.PNG.

    Note

    The default filters are:

    Status: Open, Acknowledged, Assigned, Blackout

    Severity: Critical, Major, Minor, Warning, Information

Time filters

The time filter lets you filter events based on when they occurred.

events_TimeFilter.png

Predefined time periods callout_1.PNG: You can select a time period from the list and events that have occurred during the selected time period are displayed.

Custom time period callout_2.PNG: You can create a custom time period for which to filter events.

Tip

To change the date and time format, see Setting-user-preferences. 

To create a custom time period

  1. From the time filter menu callout_2.PNG, select Define Period.
  2. Choose the start and end date and time.
  3. Select Apply.
  4. Select the custom time period that now appears in the time filter menu.

Note

Custom time periods that you create are not available after you log off the Operations Management console.

Custom filters

For advanced filtering options like viewing events from specific devices, you can create custom filters.

Creating custom filters

Applying custom filters

Performing operations on custom filters

events_CustomFilter.png

To create custom filters

  1. From the Events action menu, select Create Custom Filter callout_1.PNG.
    events_CreateCustomFilter.png
  2. Select one or more event status and severity. 
    Filtering is disabled if you do not select any event status or severity, and events with any status or severity are considered.

  3. Select any one of the applications, groups, or devices category. Use the drop-down box of the selected category to select one or more items.

    Note

    The applications, groups, and devices categories are populated based on your permissions. For more information, see Creating-roles.

  4. (Optional) To add advanced filtering options, select the Add Advanced Filter check box. See Advanced filtering for more information.

  5. Click Apply to apply the custom filter.

    Note

    The custom filter is applied but not saved. To make changes to the custom filter before saving it, select Create Custom Filter callout_1.PNG.

    Ensure to save the custom filter before you navigate to a different page or restore default filters.

  6. From the Events action menu, select Save As New Filter callout_2.PNG to save the custom filter.
  7. Enter the custom filter name and click OK.

Advanced filtering

  1. From the Class list, select a class.
    The sub-classes for the selected class are automatically selected.
  2. To filter events according to one or more event attributes, specify the following information for each attribute:
    1. (Optional) Select a left parenthesis or a NOT condition.
    2. Select an event attribute.The [confluence_note] macro is a standalone macro and it cannot be used inline.
    3. Select a comparison operator. 
    4. Enter a value against which you want the filter to compare.
    5. (Optional) Select a right parenthesis.
    6. To add another filter condition (event attribute), click dashboard_editRowAddRow.png
    7. Select a logical operator, AND or OR.
    8. Repeat step a through step g to add as many filter conditions as you want.
    9. To remove a filter condition, click dashboard_editRowDeleteRow.png in the corresponding filter condition row.

Comparison operators

Operator

Description

Slot types

==

Events are listed only if the slot value matches the comparison value.

Enum, String, Number, List of String

!=

Events are listed only if the slot value does not match the comparison value.

Enum, String, Number, List of String

>

Events are listed only if the slot value is greater than the comparison value.

Enum, String, Number

<

Events are listed only if the slot value is less than the comparison value.

Enum, String, Number

>=

Events are listed only if the slot value is greater than or equal to the comparison value.

Enum, String, Number

<=

Events are listed only if the slot value is less than or equal to the comparison value.

Enum, String, Number

Has prefix

Events are listed only if the slot value starts with the comparison value.

String, Number

Has suffix

Events are listed only if the slot value ends with the comparison value.

String, Number

Contains

Events are listed only if the slot value contains the comparison value.

String, Number, List of String

Within

Events are listed only if the slot value is an exact match with one of the comma-separated list of comparison values.

String, Number, List of String

Contains one of

Events are listed only if the slot value is an exact match with one of the comma-separated list of comparison values.

String, Number, List of String

Outside

Events are listed only if the slot value does not match with any of the comma-separated list of comparison values.

String, Number

Matches

Events are listed only if the slot value contains the comparison value.

You can provide the following parameters in addition to the comparison value:
%d - decimal integer number
%f - floating point real number
%c - single character
%s - string value

Consider the following example values in the message slot of eight events:

Event 1

Memory Consumption - 10 MB – on machine clm-dev-008700

Event 2

CPU utilization 85.35% – on machine clm-dev-007890

Event 3

Memory Consumption - 5 MB – on machine clm-dev-108781

Event 4

CPU utilization 75.95% – on machine clm-dev-087654

Event 5

Memory Consumption – 894  MB – on machine clm-dev-54657

Event 6

CPU utilization 68.45% – on machine clm-dev-37878

Event 7

Consumption of storage space is high on vm-dev-45 machine

Event 8

Utilization taking higher trend

When you use the matches operator for the message slot:

  • Message matches Consumption – %d
    Events 1, 3, and 5 are displayed, as the following criteria matches:
    Consumption as a constant and an integer variable listed after Consumption.
  • Message matches machine %s
    Events 1, 2, 3, 4, 5, and 6 are displayed as the following criteria matches:
    machine as a constant and a string variable listed after machine.

String, List of String

Subclass of

Events are listed only if they are a subclass or child class of the provided class.

Class

Superclass of

Events are listed only if they are a super-class or parent class of the provided class.

Class

Note

  • The search is not case sensitive, except for the List of String slot type. For example, an event with slot value "London" is listed when you specify "london" or "London" for an "==" operator.
  • For operations on strings like ">" or "<", the ASCII values of strings are used for comparison.
    For example, if you use the operator ">" when the Message slot has “cell started” and the comparison string is “b”, this event is listed. If the comparison string is “d”, this event is not listed.
  • The slot type number includes integers, floating point, and real numbers.

To apply custom filters

  1. From the Events action menu, select View Saved Filters callout_3.PNG.
    The list of saved custom filters is displayed.
  2. Select a custom filter from the list.

To perform operations on custom filters

  1. From the Events action menu, select View Saved Filters callout_3.PNG.
    The list of saved custom filters is displayed.
  2. From the action menu for the custom filter, you can edit, rename, or delete the custom filter.

    events_CustomFilterOperations.png

Related topics

Monitoring-events

Viewing-event-details

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*