| Table of Contents | ||
|---|---|---|
|
...
Name | Enter a descriptive name for the post filter. |  |
|---|---|---|
Basic Data | This area is to identify the data flow and characteristics. Click Add to include a condition (you can add several). Then select a parameter from the drop-down and specify the value. | |
Extra Data | This is where you specify the condition(s) that will activate the post filter. Click Add to include a condition (you can add several). Then select a parameter from the drop-down and specify the rule. The options that appear in the drop-down depend on the alert query. | |
Eventdate | Here you can choose to apply the post filter only to events generated within a specified time range (for example between 8PM and 8AM). Select this checkbox and click Add. Then specify a time range using the time expressions in the different fields. If the alert's query contains other fields with timestamp data, you can use them to define the date range. | |
Action | Select the action you want to perform when the alert meets the criteria:
| |
Managing post filters
In the Overview tab
When an alert has already a post filter applied, the ellipsis menu will show the edit filter option instead of new filter. In this window, you can see all the filters applied to that specific alert and delete them, or add more filters.
...
In the post filters tab
All post filters created are listed in the Post filters tab of the Alerts area. Here you can review them, stop them temporarily, restart them, or permanently delete them. However, you cannot modify them, only delete them and create them again with different settings.
Click the ellipsis menu that appears at the end of the row and select:
Stop: when the filter is active, the menu shows this option to deactivate it.
Run: when the filter is inactive, the menu shows this option to activate it again.
Delete: this option removes the filter permanently.
...
Related articles: