Defining event groupings

You can group events in an Event Viewer by the values of their fields, to make the event list easier to use. For example, you can group events by their location and then by their severity.

Define event groupings in the View Builder. You can group events, change the order of groupings, and remove groupings.

Instructions for Administrators.You can set a maximum number of levels of grouping and can define which columns can be used for event grouping. This setting is defined in the server.init file. For more information, see Setting the maximum number of levels for event grouping.

Before you begin

  1. Open the View Builder.
  2. Select a view from the Available views list.
  3. Click the Group Columns tab.

Procedure

  • To group events in the Event Viewer that uses the selected view:
    1. In the Available fields list, select the name of the field that acts as the primary way to group events in the Event Viewer.
      The field name moves to the Grouped by list.
    2. Click Add selected field.
    3. If required, add further levels of grouping in the same manner.
      Restriction: There is a maximum number of levels that you can define. This level is set by an administrator and the default maximum number is 3.
  • To change the order of a grouping:
    1. Use the buttons to the right of the Grouped by list to change the order of the grouping as follows:
      Table 1. View editor group order buttons 

      Button

      Action
      This icon shows an arrow pointing upward.

      Click Up to move the selected field up 1 position.
      This icon shows an arrow pointing downward.

      Click Down to move the selected field down 1 position.
  • To remove one or more levels of grouping, select a field name in the Grouped by list and click Remove selected field.
  • Click Save to save the view and continue customizing the view, or click Save and Close to save the view and close the View Builder.

    If you click Save, wait for your changes to be applied to the event list before you continue to customize the view.

What to do next

Apply the view to an Event Viewer by setting the widget preferences.