Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Operations Manager i10.62

Use > Use the Event Browser > Event Filters > Event Filter elements

Event Filter elements

When editing or creating filters in the Manage Event Filters side panel, multiple elements are displayed that you can use either individually or in combination to filter events. By using the operators OR and AND you can combine the filter elements in any way required for your purpose.

For more information about the event filter elements, select the appropriate category in the following list:

General Filter Elements

The General category displays the filter elements listed in the following table.

UI Element (A-Z)	Description
Assigned To	User or user group to whom the events you want to find are assigned. Multiple assignments can be selected. For example, you can select `Assigned To Me` and `Unassigned`.
Category	Category of event that you want to use as a filter option, for example: `DB`, `Storage`, `System`, or `WebApp`.
Correlation	Select the desired option to search for top level events, or only cause events: Not a symptom (top level): includes all events that are not correlated as symptoms of other events, and do not have a cause assigned. Cause: includes all events that are root cause events. They cannot be symptoms of another cause event.
Description	Description of an event as displayed in the contents of the original event's description field.
Lifecycle State	Stage in the problem lifecycle that the events you are looking for have reached, for example: `Open`, `In Progress`, `Resolved` or `Closed`. Multiple lifecycle states can be selected. Note The Event Browser (HTML) cannot display closed events. To view closed events, see View closed events in the Event Browser.
Priority	Searches for events that match the specified priorities, for example: `None`, `Low`, or `Medium`. Multiple priorities can be selected.
Severity	Selects an event severity to use as a filter option. Multiple severities can be selected.
Subcategory	Name of the event subcategory to which the events you are looking for belong.
Title	Title of the events you are looking for.
Type	Type of event you want to display with the filter.

Dates Filter Elements

The Dates category displays the filter elements listed in the following table.

UI Element (A-Z)	Description
Time Changed	Specifies a point in time relative to the current time used to filter events. Events can be selected using the following operators: is not older than is older than after before The time period can be specified in minutes, hours, days, or weeks. Note The Event Browser is dynamically updated. Events that no longer match a relative time filter are removed from the Event Browser and new events that match are added.
Time Created	Specifies the dates and times between which the events you are searching for occurred.
Time First Received	Specifies the dates and times between which OMi first received notification of the events you are searching for.
Time Received	Specifies the dates and times between which the events you are searching for were received. In case of duplicate events, the dates and times between which the last duplicate events were received.
Time State Changed	Date and time when the last lifecycle state change took place.

Additional Event Properties Filter Elements

The Additional Event Properties category displays the filter elements listed in the following table.

UI Element (A-Z)	Description
Application	Selects events linked to the named application.
Custom Attribute	Selects the Custom Attributes editor where you can specify a custom attribute, an operator, and a value for use in filtering. You define a custom attribute filter by specifying the name of the custom attribute in the field on the left, selecting a filter matching criteria from the list, and specifying the value of the custom attribute in the field on the right.
Event Type Indicator	Enables you to filter by Event Type Indicator (ETI).
Event Type Indicator Value	Enables you to filter by Event Type Indicator (ETI) value.
Has Annotations	Selects events based on whether or not they have annotations.
Key	Selects events that contain a reference to the named key.
Node Type	Selects events of a specific node type, or events that are derived from a specific node type.
Object	Selects events that are related to a named object, as specified in the original OM message.
Original Data	Original event text as captured from HPE Operations Agents before being formatted into an OM message. Contains information about the original input before being normalized by HPE Operations Agent policies into a message. Typically, the information available includes node name, message group, application, object, severity, and message text.
Related CI Type	Selects the option to search for events that are related to the specified CI type. The dedicated operators for filtering CI types are: equals: Related CI matches a specified CI type is derived from: Related CI is derived from the specified CI type
Solution	A text field used to describe the solution steps taken to solve the problem identified by the event. Solution texts can be synchronized with external managers such as Service Manager.
Source CI Type	Selects the option to search for events that are a child of the specified CI type. The dedicated operators for filtering CI types are: equals: Related CI matches a specified CI type is derived from: Related CI is derived from the specified CI type
Subcomponent ID	Selects events that have (or do not have) the specified subcomponent ID.

Advanced Properties Filter Elements

Additional, advanced properties are available as filter elements if you click Show complete list in the filter selection. You can later click Show categorized list to exclude the advanced properties and return to the categorized selection of filter elements.

UI Element (A-Z)	Description
Automatic Action Call	Selects events with the specified Automatic Action Call.
Automatic Action Status	Selects events that exhibit any of the specified Automatic Action Statuses. The possible statuses are: Available Running Succeeded Failed None
CI Resolution - Number of Hints	Selects events with the specified number of CI Resolution Hints.
CI Resolution - Number of Matched Hints	Selects events with the specified number of matched CI Resolution Hints.
CI Resolution Quality Metric	Selects events with the specified CI Resolution Quality Metric.
CI Resolution Status	Selects events with the specified CI Resolution Success Status.
Close Key Pattern	Selects events with the specified Close Key Pattern. An event with this pattern closes all events whose key attribute matches the string.
Control Transferred	Selects events for which control was transferred to an external server or not transferred to an external server.
Control Transferred - Web service hostname	Selects events for which control was transferred to an external server with the specified web service hostname.
Correlation Rule ID	Selects events with the specified Correlation Rule ID.
Correlation Type	Selects events with the specified Correlation Type. The possible types are: Manually related TBEC NNMi SBEC
Duplicate Count	Selects events with the specified number of duplicates.
ETI Hint	Selects events with the specified ETI Resolution Hint.
External ID	Selects events with the specified External ID.
Has Custom Attributes	Selects events that have or do not have custom attributes.
Instruction Available	Selects events that have or do not have available instructions. Instructions are configured in the policy that generates the event. They can describe an automatic action, provide details on how to perform an operator-initiated action, or detail the steps for resolving a problem when a specified type of event is received.
Instruction Interface Name	Selects events with the specified instruction interface name.
Instruction Parameter String	Selects events with the specified instruction parameter string.
Log Only	Selects events which are generated under conditions matching (or not matching) a log only exception rule. Events that match this rule are retained but automatically closed.
Matched Policy Condition Name	Selects events with the specified policy condition name.
Matched Policy Name	Selects events with the specified policy name.
Matched Policy Type	Selects events with the specified policy type. You can specify one or multiple policy types.
Node Hint	Selects events with the specified Node Hint.
Number of Symptoms	Selects events with the specified number of symptoms. Symptoms are events that occur as a result of another event, as part of a correlation rule.
Operations Manager Service ID	Selects events with the specified Operations Manager Service ID.
Originating Server - Core ID	Selects events based on the core ID of the originating server.
Originating Server - Hostname	Selects events based on the host name of the originating server.
Originating Server - IP Address	Selects events based on the IP address of the originating server.
Owned in HPOM	Selects events based on whether or not they are owned in Operations Manager.
Received as Notify	Selects events based on whether or not they are received as notify-only events via an event forwarding rule.
Received On CI Downtime	Selects events which were received during downtime or not received during downtime.
Related CI Hint	Selects events with the specified Related CI Hint.
Sending Server - Core ID	Selects events based on the core ID of the sending server.
Sending Server - Hostname	Selects events based on the host name of the sending server.
Sending Server - IP Address	Selects events based on the IP address of the sending server.
Skip Duplicate Suppression	Selects events based on the whether or not duplicate suppression is inactive.
Source CI Hint	Selects events with the specified Source CI Hint.
Sourced From - Connected Server	Selects events that originate from one of the Connected Servers. The servers listed are those that are set up in Administration > Setup and Maintenance > Connected Servers.
Sourced From - External ID	Selects events that originate from an external source, identified by its external ID.
Sourced From - External URL	Selects events that originate from an external source, identified by its external URL.
Sourced From - Hostname	Selects events that originate from an external source, identified by its host name.
User Action Call	Selects events with the specified User Action Call.
User Action Status	Selects events that exhibit any of the specified User Action Statuses. The possible statuses are: Available Running Succeeded Failed None

Send Help Center feedback