Setting up filters for event list data
Filters are used to build SQL queries that can be run on the ObjectServer alerts database tables, in order to display custom alert information in monitor boxes and event lists.
Filters define which alerts are displayed in the event list:
- Where a certain field has a certain value
- Where a certain field has a value similar to something
- Where the events occurred within two fixed points in time
- Where the events occurred up to a certain number of minutes ago
A number of default filters are provided with Tivoli Netcool/OMNIbus.
These filters are as follows:
- Last 10 Min.
- This filter displays all alerts except ProbeWatch, TSMWatch, and ConnectionWatch alerts. The results are identical to those for the Default filter, except that the Last 10 Min. filter only displays alerts that occurred in the last 10 minutes.
- In Maintenance
- This filter displays alerts that have been indicated as being "in maintenance" by the operator.
- Escalated
- This filter displays alerts that have been escalated by the operator.
- Information
- This filter displays alerts that have been identified as Information alerts.
Information alerts are:
- Alerts that have been designated as Information alerts by probes
- Alerts that are not ProbeWatch, TSMWatch, or ConnectionWatch alerts
- Alerts for which an escalation level has been set
- Task List
- This filter displays alerts that have been added to the operator's task list.
- Netcool® Status
- This filter displays only ProbeWatch, TSMWatch, and ConnectionWatch alerts.
- Default
- This filter displays all alerts except ProbeWatch, TSMWatch, and ConnectionWatch alerts.
- All Events
- This filter displays all alerts.
In addition, you can build custom filters. Filters are saved as .elf files. You use the Filter Builder to create and edit filters.