User guide

Setting Up Fault Management Configuring Event Filters
932
AlliedView NMS Administration Guide
Setting Match
Criteria
Determines whether the incoming event should be filtered or not. If a field is left blank, it is
automatically matched. The condition for the event filter to be applied is that all the match criteria
specified should be satisfied. If one criteria fails, the filter will not be applied.
The following expressions can be used, while specifying the match criteria.
• Wildcard - Asterisk (*): A match of 0 or more characters of any value.
For example, “Failed*” will match any string starting with Failed. Expressions like
*Failed, Fai*led*, or * can be used which have relevant meaning.
• Negation - Exclamation (!): Used at the start of the field to specify exclusion of events
matching this expression. For example, !Failed will exclude strings starting with
“Failed”.
• Separator - Comma (,): Multiple values can be specified for a single match criteria for
separating them with commas (a logical OR). For example, Critical, Major will match a
string which is either Critical or Major. For another example, if all the objects with
names starting with "abc" or "xyz" are required, then property key -name and value
abc*,xyz* is given
• Comma (,) with !: When used together, this will match the string by using a logical
AND. For example, the property key-name of *xyz,!abc* must match all names that
end in xyz AND begin with abc.
• && (Double Ampersands): This is also used for searching objects where a single value
should be matched with many patterns. For example, if all the objects with names
starting with either "abc" or ending with "xyz" are required, then property key -name
and value abc*&&*xyz is given.
• \ (Back Slash): This is used when the name of the object itself contains a comma. This
character is called an escape sequence, since it avoids searching of the objects, as if it
were two different names. For example, if an object with name "a,b" has to be
searched, then the property key - name and the value a\,b is given.
• <between>"value1" and "value2": This is used to get objects with some numeric values
within a specific range. For example, if object names with poll interval value ranging
from 300 to 305 is required, then the property key - pollinterval and the value as 300
and 305 is given. Note that the first number is smaller than the second number. Only
the values in between the given values, including the limits, will be matched.
More
Properties
Specifies additional match criteria based on the properties of com.adventnet.nms.eventdb.Event
object including Userproperties. While specifying the additional criteria, care has to be taken to
specify only those properties that are in the event object. (The name should match exact case in the
event objec.t) Apart from the default properties shown in the configuration UI, you can add Event's
base properties as match criteria, such as groupname, helpURL, id and time. Thus the More option
serves for both the Event's base properties as well as the user properties.
Add Filter
Icon
Allows a new Filter Name to be used.
TABLE 9-5 Event Filter Configuration Form
Option Description / Fields