About filtering events


When you click Icon_Filter.png on the Events page, the Event Filter page is displayed.

EventsFilter.png

The Events Filter page has the following fields:

  • Time Period: Specify the time period for the events.
  • Severity: Select one or more severity levels.
  • Category: Select an event category.
  • Event: Select an event type based on the category selected.
  • Thread ID: Specify a thread ID to see all events for a common operation (for example a Job).
  • Source: Enter a source (for example device name). Wildcards (*) are supported.
  • Target: Enter a target (for example device name). Wildcards (*) are supported.
  • Realm: Enter a realm. Wildcards (*) are supported.
  • Description: Enter a string to match the event general description. Wildcards (*) are supported.
  • Retrieve Up To: Specify how many events matching the filter to retrieve. The most recent events are retrieved. For large logs, this option improves retrieval response time for everyday queries. Default is 1000.

The default filter displays the last 30 days of events having severity warning and above. One or more fields can be combined to narrow the filter criteria. To specify a wildcard, use the * character. For example, to show all events reported for devices whose name begins with ATL, set the Target field to ATL*. Once filtered, all Refresh actions apply the filter.

You can reset the filter to the default by clicking Clear Filter. Click Save to apply the filter. The filter is persistent for your login session.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*