Quantcast
Channel: THWACK: Message List
Viewing all articles
Browse latest Browse all 20396

Re: create filters based on windows events

$
0
0

hi Cassandra,

 

My suggestion would be to create a User Defined Group and use it in a filter.

 

Look at the Provider SID field for the LEM Events you are interested in. You can then build a User Define Groups with the exact values you see in the Provider SID field as per this KB

http://knowledgebase.solarwinds.com/kb/questions/3551/Getting+Started+with+User-Defined+Groups

The Name field is just an alias. The Data field needs to match what you see in the Provider SID field. 

 

See the section on 'More on Filter conditions' in the eval guide that shows how to create a filter using a User Defined Group.  http://www.solarwinds.com/documentation/LEM/Docs/LEM_Evaluation_Guide.pdf

 

You could also achieve the same outcome with a series of condition groups to be evaluated with an OR logical operator. See Figure 28 in the eval guide for an illustration on where to toggle the AND/OR logic in the filter editor


Viewing all articles
Browse latest Browse all 20396

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>