Creating an Event Filter

You can create the following types of event filters:

Simple Event Filters
The default general-purpose filter type.
Exclusion Event Filters
Allow the exclusion of selected event types, in addition to the options given by the Simple Event Filters.
Threshold Event Filters
Allow the selection of an interval or count threshold that must be met, in addition to the options given by the Simple Event Filters.
Duplication Event Filters
Allow for duplicate events to be ignored, in addition to the options given by the Simple Event Filters.

To create an event filter:

  1. Click on the Event Action Plan Builder button on the toolbar on the %ProductName% Console window to display the Event Action Plan Builder window.

    If you are creating an event filter for the first time, the pane contains only the predefined event filters supplied with the event management service.
  2. Start the Event Filter Builder dialog using one of the following methods:
  3. Select a tab that represents a filtering criteria you want to use, for example, Severity. When you select a category, the page for that category is displayed. The help pane associated with the event filter builder describes the purpose, behavior, and parameters of each tab.
  4. Select one or more of the filtering criteria  that you want to use, for example, on the Severity page you could select Fatal and Critical. To select all entries in a category, click the Any button.

    Repeat the previous step for each filtering category you want to apply. For example, to create a filter for fatal and critical events that occur during a particular time frame, click on Day/Time and select the days and time frames you want to use.

  5. When you are finished, select File => Save As to save your changes, then enter the name you want to assign to the filter.

The new filter is added to the Event Filters pane of the Event Action Plan Builder window, and if it is a Simple Event Filter, it is added as a child entry of Event Log in the Tasks pane of the %ProductName% Console.