Example: Selecting filters

This example demonstrates how you can set up filters on the Additional Incidents Filter tab to block events.

The following is the event example:

hp^hp^^6 58916865^Node Down^^^^SNMP
Trap(IPAS)^net.hware^^^^^^^^^^^

The queries are:

evtype="pmo" and evnetnm="hp" and evcode="6 58916865"
evtype="pmo" and evnetnm="hp"
evtype="pmo" and evnetnm="AXCES" and evcode="6 58916865"
evtype="pmo" and evnetnm="AXCES"

You can permanently block problem open by entering a Network Name or Cause Code. This has the same effect as a Block Condition except that the status in the eventin record is filtered rather than blocked.

For example, using hp for Network Name and SNMP 2.0 for Cause Code. This prevents any events from server hp with cause code of SNMP 2.0 from opening a problem.

You can further refine the filter by entering an Event Interval and Recurrence Count. For example, if you set Event Interval to ten minutes and Recurrence Count to 3, the filter prevents any events from server hp with cause code of SNMP 2.0 from opening a problem unless three events are received within a ten minute interval.

Related topics

Event Services
Filtering events

View event filters
View registered events