Creating an Event Filter
You can create the following types of event filters:
- Simple Event Filters
- The default general-purpose filter type.
- Exclusion Event Filters
- Allow the exclusion of selected event types, in addition to the options
given by the Simple Event Filters.
- Threshold Event Filters
- Allow the selection of an interval or count threshold that must be met, in
addition to the options given by the Simple Event Filters.
- Duplication Event Filters
- Allow for duplicate events to be ignored, in addition to the options given
by the Simple Event Filters.
To create an event filter:
-
Click on the Event Action Plan Builder button on the toolbar on the
%ProductName% Console window to display the Event Action Plan Builder window.
If you are creating an event filter for the first time, the pane contains only
the predefined event filters supplied with the event management service.
-
Start the Event Filter Builder dialog using one
of the following methods:
-
Right-click in the Event Filters pane to display the context menu, then
select New => filter_type, where filter_type is
the type of event filter you want to use, for example, Simple Event Filter.
-OR-
-
Select File => New => filter_type from the
menu bar.
-OR-
-
Double-click on one of the event filter type folders in the Event Filters pane.
-
Select a tab that represents a filtering criteria you want to use, for example, Severity.
When you select a category, the page for that category is displayed.
The help pane associated with the event filter
builder describes the purpose, behavior, and parameters of each tab.
-
Select one or more of the filtering
criteria that you want to use, for example, on the Severity page
you could select Fatal and Critical. To select all entries in a
category, click the Any button.
Repeat the previous step for each filtering category you want to apply. For
example, to create a filter for fatal and critical events that occur during a
particular time frame, click on Day/Time and select the days and time
frames you want to use.
-
When you are finished, select File => Save As to save your
changes, then enter the name you want to assign to the filter.
The new filter is added to the Event Filters pane of the Event Action
Plan Builder window, and if it is a Simple Event Filter, it is added
as a child entry of Event Log in the Tasks pane of the %ProductName% Console.