Filtering events
Using the global search
On the Monitoring > Events page, click the search box at the top-right of the screen. You can perform searches based on slots that are visible on the Events page.
The global search is case-insensitive and returns results regardless of the character case that you use in the search query. The global search takes precedence over any filters that you use. For example, if you use the global search option , the quick filter panel disappears, and you can see the results of the global search on the Events page.
Using quick filters
The quick filters at the top of the page enable you to filter events based on status and severity. The following illustration shows the quick filters that you can use on the Events page:
The following table displays details about the quick filters.
You can save or restore your quick filters preference to use it every time that you use the Events page.
To save or restore your quick filters preference:
- Select the desired event status and event severity.
- From the Events action menu, select Save As Preference.
- To restore the default quick filters, select Restore Default Filters.
Using time filters
Use the time filter to filter events based on the time of their occurrence.
The following illustration displays the available time filters:
You can filter events based on the following time periods:
- Predefined time periods: Select a time period from the list. Events that have occurred during the selected time period are displayed.
- Custom time period: Create a custom time period for which to filter events.
To create a custom time period to filter events:
- From the time filter menu, select Define Period.
- Select the start and end date and time.
Click Apply.
Using advanced filters
Use advanced filters to filter events based on multiple criteria other than the event status. The following scenario explains how to use advanced filters.
Example
Sarah is a system administrator at Apex Global, which uses BMC Helix Operations Management for their monitoring needs. Sarah wants to check which PATROL Agents are disconnected. She knows that she can search for events about the disconnected PATROL Agents. She wants to filter all events that contain the word "disconnected" in the message so she can quickly view the disconnected PATROL Agents. Sarah also wants to save the filter so she can filter for disconnected Agents again. How can Sarah achieve these goals?
Sarah uses advanced event filters to view events that she specifies and then saves the filter.
The following video (1:46) explains how to use an advanced event filer.
You can perform the following actions on the advanced filters that you create:
- Save
- Update
- Delete
- Save the filters as a preference
- Associate advanced filters with a table view
You can also view and apply the filters that other users have created. However, you cannot modify or delete them.
To create advanced filters
- Navigate to the Monitoring > Events page, and click Advanced Filter
.
In the Selection criteria field, select the criteria to filter the events.
You can select multiple criteria at a time. For example, select the following criteria to filter alarm events that have testobject as the object type:
(Class Equals Alarm) AND (Object Matches testobject)- Click Save to save the filter.
- Click Apply filters to apply the filter to events.
- (Optional) If you want to save the filter, perform the following actions:
- Click Save .
- Provide a unique name for the advanced filter and save it.
To update advanced filters
- Navigate to Monitoring > Events page, and click Advanced Filter
.
- Click the Saved tab.
- In the Created by me area, click the Edit icon against the filter that you want to update.
- Make your changes and save the filter.
To delete advanced filters
- Navigate to the Monitoring > Events page, and click Advanced Filter
.
- Click the Saved tab.
- In the Created by me area, click Delete against the filter that you want to delete.
- Provide your confirmation and delete the filter.
Saving an advanced filter as a preference
When you save an advanced filter as a preference, the filter is applied to events by default every time you open the Events page.
- Apply a filter.
- Click the Events action menu
and click Save As Preference.
To remove an advanced filter as a preference
- Navigate to the Monitoring > Events page, and clear the applied advanced filter.
- Click the Events action menu
and click Save As Preference.
Associating advanced filters with a table view
With table views, you can configure the Event page to show the event details that you want to see. For more information about creating table views, see Creating-table-views. You can associate advanced filters with table views so that when you use an advanced filter, you can see the results in the table view that you prefer.
Perform the following steps to associate advanced filters with a table view:
- TBD
- TBD