Default language.

Filtering events


To prioritize and quickly take action on events, you can use the various built-in filters to filter events on the Monitoring Events page. You can filter events with the following types of filters:

  • Global search
  • Quick filters
  • Time filters
  • Advanced filters

 

Using the global search

Under Monitoring, on the Events page, click the search box at the top-right of the screen. You can perform searches based on slots that are visible on the Events page.

The global search is case-insensitive and returns results regardless of the character case that you use in the search query. The global search takes precedence over any filters that you use. For example, if you use the global search option global_search.png, the quick filter panel disappears, and you can see the results of the global search on the Events page.

global_search_events.png

Using quick filters

The quick filters at the top of the page enable you to filter events based on status and severity. The following illustration shows the quick filters that you can use on the Events page:

events_basic_filter.png

The following table displays details about the quick filters.

You can save or restore your quick filters preference to use it every time that you use the Events page.

To save or restore your quick filters preference:

  1. Select the desired event status and event severity.
  2. From the Events action menu, select Save As Preference.
  3. To restore the default quick filters, select Restore Default Filters.

Using time filters

Use the time filter to filter events based on the time of their occurrence.

The following screenshot displays the available time filters:

events_time_filter.png

You can filter events based on the following time periods:

  • Predefined time periods: Select a time period from the list. Events that have occurred during the selected time period are displayed.
  • Custom time period: Create a custom time period for which to filter events.

To create a custom time period to filter events:

  1. From the time filter menu, select Define Period.
  2. Select the start and end date and time.
  3. Click Apply.

    Important

    Custom time periods are applied only to the current user session on the BMC Helix Operations Management console.

Using advanced filters

Use advanced filters to filter events based on multiple criteria other than the event status.

The following scenario explains how to use advanced filters.

Example

Sarah is a system administrator at Apex Global, which uses BMC Helix Operations Management for their monitoring needs. Sarah wants to check which PATROL Agents are disconnected. She knows that she can search for events about the disconnected PATROL Agents. She wants to filter all events that contain the word "disconnected" in the message so she can quickly view the disconnected PATROL Agents. Sarah also wants to save the filter so she can filter for disconnected Agents again.

Sarah uses advanced event filters to view events that she specifies and then saves the filter.

The following video (1:46) explains how to use an advanced event filter.

icon-play@2x.png  https://youtu.be/_g3uUK5ZS4E

You can perform the following actions on the advanced filters that you create:

  • Save
  • Update
  • Delete
  • Save the filters as a preference

You can also view and apply the filters that other users have created. However, you cannot modify or delete them.

Important

  • The global search takes precedence over advanced filters. If you use the global search option bhom_global_search.png, the Advanced filter option disappears, and you can see the results of the global search on the Events page.
  • Under Monitoring, on the Events page, the quick filter displays the total count of only the primary events. It does not include secondary events. In contrast, the advanced filter displays both primary and secondary events, leading to a higher total event count displayed.

You can associate table views with the filters that you save. Use table views to define the columns that appear when you filter events. For more information about table views, see Creating-table-views.

 

 

 

Example

Sarah has created the following advanced filters to filter events at Apex Global:

  • Critical events of the Alarm class on Host A
    For this scenario, Sarah wants to see the event severity and the host name in the table view.
  • Critical events of the Alarm class with a message that contains the word disconnected
    For this scenario, Sarah wants to see the event severity and the message in the table view.

Sarah can associate different table views with the filters when she saves the filters. By doing this, every time that Sarah applies a filter, the events are displayed in the associated table view.

To create advanced filters

  1. Navigate to the Monitoring > Events page, and click Advanced Filter adv_filter_icon.png.
  2. In the Selection criteria field, select the criteria to filter the events.
    You can select multiple criteria at a time. For example, select the following criteria to filter alarm events that have testobject as the object type:
    (Class Equals Alarm) AND (Object Matches testobject)

    Important

    • To search for custom slots in an event, make sure that the custom slot value is less than 256 characters. If the slot value exceeds 256 characters, the event is not listed in the event search if you use advanced filters or global search.
    • If you have customized the display name of custom classes or event slots of custom classes by using APIs, view and select the display name of the custom classes or custom event slots in the criteria.

  3. (Optional) If you want apply a table view to the filter, click Table View and then select a table view.
  4. Click Save to save the filter.
  5. Click Apply filters to apply the filter to events.
  6. (Optional) If you want to save the filter, perform the following actions:
    1. Click Save .
    2. Provide a unique name for the advanced filter and save it.

To apply advanced filters

  1. Navigate to Monitoring > Events page, and click Advanced Filter adv_filter_icon.png.
  2. Click the Saved tab.
  3. Select a filter.
  4. Click Apply.
    You can view events according to the applied filter. If the advanced filter has an associated table view, you can view the filtered events in the table view.

When an advanced filter has an associated table view, events are filtered and displayed in the associated table view. In this case, the Table view icon table_view_icon.pngis disabled. If you want to enable the icon or if you want to use a different table view for the events, remove the table view from the advanced filter.

 

 

 

To update advanced filters

  1. Navigate to Monitoring > Events page, and click Advanced Filter adv_filter_icon.png.
  2. Click the Saved tab.
  3. In the Created by me area, click the Edit icon against the filter that you want to update.
    If you are an administrator, you can use the Created by Others area to edit the advanced filters that other users have created.
  4. Make your changes and save the filter.

Important

If the advanced filter does not contain a class as a selection criterion, the EVENT class is considered as the default class. You cannot select any other class.

To delete advanced filters

  1. Navigate to the Monitoring > Events page, and click Advanced Filter adv_filter_icon.png.
  2. Click the Saved tab.
  3. In the Created by me area, click Delete against the filter that you want to delete.
    If you are an administrator, you can use the Created by Others area to delete the advanced filters that other users have created. 
  4. Provide your confirmation and delete the filter.

Saving an advanced filter as a preference

When you save an advanced filter as a preference, the filter is applied to events by default every time you open the Events page.

  1. Apply a filter.
  2. Click the Events action menu action_menu.pngand click Save As Preference.
    events_action_menu_with_pref.png

To remove an advanced filter as a preference

  1. Navigate to the Monitoring > Events page, and clear the applied advanced filter.
    clear_applied_filter.png
  2. Click the Events action menu action_menu.pngand click Save As Preference.

 

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*