Applicable to Entuity v21.0 upwards. If you are using an earlier version of Entuity, please see this article.
To see incident/event filters, see which are applied to a View, and to apply a different filter
To see a list of incident/event filters
To see incident/event filters from a specific View, and to apply a different filter to that View
To create an incident filter or event filter
To edit an incident filter or event filter
To delete an incident filter or event filter
Introduction:
Incident filters and Event filters determine the incidents and events that are displayed in a View in the Incidents dashboard and Events dashboard. Incident filters and event filters can restrict the incidents and events that appear against objects in the View. By default, a View's incident and event filters allow Entuity to potentially raise any incident or event. An incident or event filter allows you to include only the incident or event types you want to be available in a View, and exclude those that you do not.
For an overall introduction to View filters, please see this article.
To see incident filters and event filters, and to see which are applied to a View:
You can see the incident and event filters on your Views via the View Management page, or from the specific View itself.
To see the incident/event filters currently applied to Views:
From the Views tab under the View Management page, you can see the incident and event filters that are currently applied to which Views under the Incident Filter and Event Filter columns in the tab;e. (from the dropdown box in the top left of the page, select the server or configuration set for which you wish to see details):
To see a list of incident/event filters:
Click the Incident Filters or Event Filters tab under the View Management page as required. From the dropdown box in the top left of the page, select the server or configuration set for which you wish to see details. This will open the table of all incident/event filters that you have created (plus the system incident/event filters) on the currently selected server or configuration set, detailing the following for each filter:
- Name - name of the incident/event filter.
- System - if this is a system incident/event filter (Yes) or a custom filter (No).
- Pass IP -
- In Use - if this filter is currently applied to any Views.
- Description - summary of the rules applied to this filter.
Please see the sections below for help and information on how to create, edit or delete incident/event filters.
To see incident/event filters from a specific View, and to apply a different filter to that View:
- Find the View you would like to look at either via the Explorer or the breadcrumbs.
- Right click the desired View and click Edit View.
- The Edit View form will slide in on the right of the browser. Click the Incident Filter field or Event Filter field. These fields display the currently selected respective filter applied to this View.
To create an incident filter or event filter:
You can create an incident filter or event via the View Management page or from the Edit View form of a View itself:
- Navigate to one of the following:
- View Management page > Incident Filters tab or Event Filters tab > select the server or configuration set on which you wish to create the content filter > Create Incident Filter or Create Event Filter
- View > Edit View > Incident Filter or Event Filter> Create Incident Filter or Create Event Filter.
- View Management page > Incident Filters tab or Event Filters tab > select the server or configuration set on which you wish to create the content filter > Create Incident Filter or Create Event Filter
- This will open the New Incident Filter / New Event Filter form.
- Enter a name for the filter in the Name field.
- Specify whether to include events or incidents from unmanaged devices in the Include Incidents from Unmanaged Devices / Include Events from Unmanaged Devices field.
- Scroll through the list of incidents under the Included Incidents field, or the list of events under the Included Events field and select which incidents/events you want to include in the your filter. Use ctrl or shift to select multiple incidents/events at the same time.
- When you have made your selections, click Done in the top right to save the selections, otherwise click Cancel.
- Click Done to save the filter, or click Cancel.
To edit an incident filter or event filter:
Note, Entuity provides default system filters that cannot be edited or deleted.
You can edit an incident/event filter from either the View Management page, or from the Incident Filter / Event Filter form of a View.
- Navigate to one of the following:
- View Management page > Incident Filters tab / Event Filters tab > select the filter to edit > Edit Incident Filter / Edit Event Filter.
- View > Edit View > Incident Filter field / Event Filter tab > select the content filter to edit.
- The Edit Incident Filter / Edit Event Filter form will open, which contains the same fields as when creating a new filter (see above).
- Once you have made your edits, click Done to save your changes, otherwise click Cancel.
To delete an incident filter or event filter:
Note, Entuity provides default system filters that cannot be edited or deleted.
You can delete a content filter from either the View Management page, or from the Content Filters form of a View.
- View Management page > Incident Filters tab / Event Filters tab > select the filter to delete > Delete Incident Filter / Delete Event Filter.
View > Edit View > Incident Filter field / Event Filter field > select the filter to delete > Delete Incident Filter / Delete Event Filter.
A deletion confirmation dialog will appear, click Yes to delete.
Note, you cannot delete a content filter that is currently applied to a View. You must first edit the View so that it is not using the specified content filter, and then you will be able to delete the content filter.
RESTful API:
Please see the following for help and information on managing incident and event filters via Entuity RESTful API:
- Incident filters:
- Event filters:
Comments
0 comments
Please sign in to leave a comment.