Filtering events
Using the global search
Under Monitoring, on the Events page, click the search box at the top-right of the screen. You can perform searches based on slots that are visible on the Events page.
The global search is case-insensitive and returns results regardless of the character case that you use in the search query. The global search takes precedence over any filters that you use. For example, if you use the global search option , the quick filter panel disappears, and you can see the results of the global search on the Events page.
Using quick filters
The quick filters at the top of the page enable you to filter events based on status and severity. The following illustration shows the quick filters that you can use on the Events page:
The following table displays details about the quick filters.
You can save or restore your quick filters preference to use it every time that you use the Events page.
To save or restore your quick filters preference:
- Select the desired event status and event severity.
- From the Events action menu, select Save As Preference.
- To restore the default quick filters, select Restore Default Filters.
Using time filters
Use the time filter to filter events based on the time of their occurrence.
The following screenshot displays the available time filters:
You can filter events based on the following time periods:
- Predefined time periods: Select a time period from the list. Events that have occurred during the selected time period are displayed.
- Custom time period: Create a custom time period for which to filter events.
To create a custom time period to filter events:
- From the time filter menu, select Define Period.
- Select the start and end date and time.
Click Apply.
Using advanced filters
Use advanced filters to filter events based on multiple criteria other than the event status.
The following scenario explains how to use advanced filters.
Example
Sarah is a system administrator at Apex Global, which uses BMC Helix Operations Management for their monitoring needs. Sarah wants to check which PATROL Agents are disconnected. She knows that she can search for events about the disconnected PATROL Agents. She wants to filter all events that contain the word "disconnected" in the message so she can quickly view the disconnected PATROL Agents. Sarah also wants to save the filter so she can filter for disconnected Agents again.
Sarah uses advanced event filters to view events that she specifies and then saves the filter.
The following video (1:46) explains how to use an advanced event filter.
You can perform the following actions on the advanced filters that you create:
- Save
- Update
- Delete
- Save the filters as a preference
You can also view and apply the filters that other users have created. However, you cannot modify or delete them.
You can associate table views with the filters that you save. Use table views to define the columns that appear when you filter events. For more information about table views, see Creating-table-views.
Example
Sarah has created the following advanced filters to filter events at Apex Global:
- Critical events of the Alarm class on Host A
For this scenario, Sarah wants to see the event severity and the host name in the table view. - Critical events of the Alarm class with a message that contains the word disconnected
For this scenario, Sarah wants to see the event severity and the message in the table view.
Sarah can associate different table views with the filters when she saves the filters. By doing this, every time that Sarah applies a filter, the events are displayed in the associated table view.
To create advanced filters
- Navigate to the Monitoring > Events page, and click Advanced Filter
.
In the Selection criteria field, select the criteria to filter the events.
You can select multiple criteria at a time. For example, select the following criteria to filter alarm events that have testobject as the object type:
(Class Equals Alarm) AND (Object Matches testobject)- (Optional) If you want apply a table view to the filter, click Table View and then select a table view.
- Click Save to save the filter.
- Click Apply filters to apply the filter to events.
- (Optional) If you want to save the filter, perform the following actions:
- Click Save .
- Provide a unique name for the advanced filter and save it.
To apply advanced filters
- Navigate to Monitoring > Events page, and click Advanced Filter
.
- Click the Saved tab.
- Select a filter.
- Click Apply.
You can view events according to the applied filter. If the advanced filter has an associated table view, you can view the filtered events in the table view.
When an advanced filter has an associated table view, events are filtered and displayed in the associated table view. In this case, the Table view icon is disabled. If you want to enable the icon or if you want to use a different table view for the events, remove the table view from the advanced filter.
To update advanced filters
- Navigate to Monitoring > Events page, and click Advanced Filter
.
- Click the Saved tab.
- In the Created by me area, click the Edit icon against the filter that you want to update.
If you are an administrator, you can use the Created by Others area to edit the advanced filters that other users have created. - Make your changes and save the filter.
To delete advanced filters
- Navigate to the Monitoring > Events page, and click Advanced Filter
.
- Click the Saved tab.
- In the Created by me area, click Delete against the filter that you want to delete.
If you are an administrator, you can use the Created by Others area to delete the advanced filters that other users have created. - Provide your confirmation and delete the filter.
Saving an advanced filter as a preference
When you save an advanced filter as a preference, the filter is applied to events by default every time you open the Events page.
- Apply a filter.
- Click the Events action menu
and click Save As Preference.
To remove an advanced filter as a preference
- Navigate to the Monitoring > Events page, and clear the applied advanced filter.
- Click the Events action menu
and click Save As Preference.