IBM Support

QuickFilter does not work when original base filter uses an OR condition

Troubleshooting


Problem

Steps to replicate:
- Adjust mapping in Netcool Integration to include details.customer
      "details": {
        "customer": "AIM",
        "lastProcessedEventOccurrenceTime": 1752776217
      }
- Create a Alert Viewer basic filter (say ATest)
((details.customer = 'AIM') or (deduplicationKey like 'aiopstracker'))
- Feed 2 events
sample:
OMNIHOME=/opt/IBM/tivoli/netcool/omnibus
$OMNIHOME/bin/nco_sql -server AGG_Z -user root -password 'netcool' << EOF
delete from alerts.status;
go
exit
EOF
$OMNIHOME/bin/nco_sql -server AGG_Z -user root -password 'netcool' << EOF
insert into alerts.status (Identifier, Node, Summary, Severity, Type, AlertGroup, Manager, Service, Customer) values ('aiopstracker', 'www.aiopstracker.com', 'www.aiopstracker.com: event tracker', 4, 1, 'nco_sql', 'NCOSQL', 'WebService', 'AIM');
go
exit
EOF
$OMNIHOME/bin/nco_sql -server AGG_Z -user root -password 'netcool' << EOF
insert into alerts.status (Identifier, Node, Summary, Severity, Type, AlertGroup, Manager, Service, Customer) values ('aiopstracker1', 'www.aiopstracker1.com', 'www.aiopstracker1.com: event tracker', 4, 1, 'nco_sql', 'NCOSQL', 'WebService', 'AIM');
go
exit
EOF
- Load Alert Viewer
- Select the filter (ATest)
- Hightlight/click 1 of the events (say the www.aiopstracker1.com)  > Right click on "Summary" field > Quick filter > Equals
Result:
- The 2 events still show.

--- Check the Option Filters, a 3rd condition is added and uses "OR"
If details.customer equal to only 'AIM'
OR deduplicationKey constains only 'aiopstracker'
OR summary equal to www.aiopstracker1.com: event tracker
Expectation:
- The event with Summary "www.aiopstracker1.com" only is displayed.

Symptom

Events are not filtered based on the selected field.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSE9G0Q","label":"IBM Cloud Pak for AIOps"},"ARM Category":[{"code":"a8m3p000000PC55AAG","label":"Watson AIOps-\u003EAI Manager-\u003EAlert Viewer"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"4.10.0;4.10.1;4.2.0;4.2.1;4.3.0;4.4.0;4.4.1;4.5.0;4.5.1;4.6.0;4.6.1;4.7.0;4.7.1;4.8.0;4.8.1;4.9.0;4.9.1"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
28 July 2025

UID

ibm17240815