Mapping search criteria pconfig variables to TrueSight console

This topic provides information about how to map the search criteria pconfig variables to the fields in the Pattern search criteria window in the TrueSight console. 

PATROL for Log Management stores search criteria configuration in the following format:

ASTXBSTXCSTXDSTXESTXFSTXGSTXHSTXISTXJSTXKSTXL,M,N,O,P,QSTXRSTXS

where STX is Ctrl+Shift+B.

Search criterion

Variable

Field and values

Search criterion in the TrueSight console

Search string 1

A


NOT check box

  • 0 - Disabled
  • 1 - Enabled

pconfig to TS console mapping_01.png

B

String

Search string 2

C

NOT check box

  • 0 - Disabled
  • 1 - Enabled

D

String

Custom event handling configuration

Variable

Field and values

Custom Event handling configuration in the TrueSight console

E

Threshold#1

pconfig to TS console mapping_02.png

F

Threshold#1 state

  • 1 - NONE
  • 2 - OK
  • 3 - WARN
  • 4 - ALARM

G

Threshold#2

H

Threshold#1 state

  • 1 - NONE
  • 2 - OK
  • 3 - WARN
  • 4 - ALARM

I

Override Global Event handling configuration

  • 0 - Disabled
  • 1 - Enabled

J

Custom Event origin

K

Custom Event message

R

Ignore duplicate Events for next (min)

Number search

Variable

Field and values

Number search in the TrueSight console

L

First number

pconfig to TS console mapping_03.png

M

Operator

  • 1 - <
  • 2 - <=
  • 3 - =
  • 4 - >=
  • 5 - >
  • 6 - !=

N

Begin token

O

End token

P

Operator

  • 1 - >
  • 2 - >=

Q

Second number

S is not in use (value is always 0).

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*