Event Filter Builder window: Extended Attributes page

This topic describes the Event Filter Builder window: Extended Attributes page in IBM Director.

Explanation

Enables you to qualify the filtering criteria using additional Keywords and keyword Values that can be associated with some categories of events, such as SNMP. These additional keywords and corresponding values are referred to as the event's extended attributes.

This category can be particularly useful for narrowing the filtering criteria to a lower level of detail, for example, to isolate one or more values originating from a specific system.

You can also view the extended attributes of a specific event by opening the Event Log task in the Tasks pane of the IBM Director Console and selecting an appropriate event from the list. The event's extended attributes, if present, are displayed at the bottom of the Event Details panel, below the Sender Name category.

Because event types are hierarchical, an event with a particular event type has its associated extended attributes as well as the extended attributes of its parent event types. For example, the event type Director.Topology.Offline has extended attributes for Director.Topology.Offline and Director.Topology.

You can specify keywords and values in Extended Attributes only if one event type is selected. If the current event type is set to Any, Extended Attributes is disabled. Extended Attributes is also disabled if multiple event types are selected. If the Extended Attributes page is enabled for a specific event type, but no keywords are listed, the IBM Director Server is not aware of any keywords that can be used for filtering.

An event will meet the filtering criteria as follows:
  • If you select multiple keywords, all values received must match all values of all selected keywords (Boolean AND).

    AND

  • If you specify multiple values for a single keyword, the values received must match at least one of the values specified for the keyword (Boolean OR).

Fields

Any
By default, this check box is selected indicating that filtering should occur on all extended attributes. Deselect Any to select specific keyword/value pairs.
Keywords
Select the keywords on which you want to filter. If no keywords are listed, the IBM Director Server has not been made aware of or has not published the keywords for the selected event category. You can select multiple keywords.
Values
Specify a value for the keyword on which you want to filter. You can specify multiple values, but you cannot specify a range of values.

If you want to enter multiple values for a single keyword, use the Add key each time you want to add a value.

Boolean OR is used to determine whether an event's extended attributes meet the filtering criteria for multiple values of a single keyword.

If you enter more than one keyword/value pair, Boolean AND is used to determine whether an event's extended attributes meet the filtering criteria (all keyword values must be true).

Case Sensitive
Select this option if the specified keyword value should be filtered as case sensitive.
Update
Allows you to change the value of a selected keyword/value pair.
  1. Select a keyword/value pair.
  2. Select Values to change the corresponding value.
  3. Select Update to make the change take effect.
Delete
Deletes a selected keyword/value pair as a selection criterion.

Table of Contents

(C) Copyright IBM Corporation 1999,2005. All Rights Reserved.