| Table of Contents | ||
|---|---|---|
|
...
Creating a post filter on an alert
From the alert list
Post filters are created in the Overview tab of the Alerts area.
...
Name | Enter a descriptive name for the post filter. |  |
|---|---|---|
Basic Data | This area is to identify the data flow and characteristics. Click Add to include a condition (you can add several). Then select a parameter from the drop-down and specify the value. | |
Extra Data | This is where you specify the condition(s) that will activate the post filter. Click Add to include a condition (you can add several). Then select a parameter from the drop-down and specify the rule. The options that appear in the drop-down depend on the alert query. | |
Eventdate | Here you can choose to apply the post filter only to events generated within a specified time range (for example between 8PM and 8AM). Select this checkbox and click Add. Then specify a time range using the time expressions in the different fields. If the alert's query contains other fields with timestamp data, you can use them to define the date range. | |
Action | Select the action you want to perform when the alert meets the criteria:
| |
From the alert details window
You can also create a post filter from the alert details window, which is accesible by clicking an alert’s ID on the list (more info about the details window here). Simply click on the New post filter button at the top right and configure it as shown above.
...
Managing post filters
...
From the
...
alert list
When an alert has already a post filter applied, the ellipsis menu will show the edit filter option instead of new filter. In this window, you can see all the filters applied to that specific alert and delete them, or add more filters.
...
From the alert details window
When an alert has already a post filter applied, the button at the top right of the alert details window becomes edit post filter (the number indicates the filters already applied). The window that opens is the same as the one shown above, where you can see all the filters applied to that specific alert and delete them, or add more filters.
...
In the post filters tab
All post filters created are listed in the Post filters tab of the Alerts area. Here you can review them, stop them temporarily, restart them, or permanently delete them. However, you cannot modify them, only delete them and create them again with different settings.
Click the ellipsis menu that appears at the end of the row and select:
Stop: when the filter is active, the menu shows this option to deactivate it.
Run: when the filter is inactive, the menu shows this option to activate it again.
Delete: this option removes the filter permanently.
...
Related articles:
| Child pages (Children Display) | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|