Example: Event blocking with conditions

This is an example of event blocking from two servers, hpe and falcon.

To block incident open events from both hpe and another server named dolphin, select or in the Condition field, 2 in the second Index field and dolphin in the second Value field on the External Filters tab. If you specify a condition (AND or OR), then you must complete both Index and both Value fields.

To prevent insertion of records in the eventin file, the Block Events? field must be true (checked).

To specify a time range for blocking, set the Start Blocking at and End Blocking at fields. In this example, use 08:00 for start blocking and 17:00 for end blocking.

With these settings, all inventory add (icma) events are blocked between 08:00 and 17:00 if they come from either the hpe or dolphin server. This action avoids unnecessary adds and updates if installation activity is scheduled to occur on the network during this time.