Troubleshooting
Problem
Steps to replicate:
- Adjust mapping in Netcool Integration to include details.customer
"details": {
"customer": "AIM",
"lastProcessedEventOccurrenceTime": 1752776217
}
- Create a Alert Viewer basic filter (say ATest)
((details.customer = 'AIM') or (deduplicationKey like 'aiopstracker'))
- Feed 2 events
sample:
OMNIHOME=/opt/IBM/tivoli/netcool/omnibus$OMNIHOME/bin/nco_sql -server AGG_Z -user root -password 'netcool' << EOF
delete from alerts.status;
go
exit
EOF
$OMNIHOME/bin/nco_sql -server AGG_Z -user root -password 'netcool' << EOF
insert into alerts.status (Identifier, Node, Summary, Severity, Type, AlertGroup, Manager, Service, Customer) values ('aiopstracker', 'www.aiopstracker.com', 'www.aiopstracker.com: event tracker', 4, 1, 'nco_sql', 'NCOSQL', 'WebService', 'AIM');
go
exit
EOF
$OMNIHOME/bin/nco_sql -server AGG_Z -user root -password 'netcool' << EOF
insert into alerts.status (Identifier, Node, Summary, Severity, Type, AlertGroup, Manager, Service, Customer) values ('aiopstracker1', 'www.aiopstracker1.com', 'www.aiopstracker1.com: event tracker', 4, 1, 'nco_sql', 'NCOSQL', 'WebService', 'AIM');
go
exit
EOF
- Load Alert Viewer
- Select the filter (ATest)
- Hightlight/click 1 of the events (say the www.aiopstracker1.com) > Right click on "Summary" field > Quick filter > Equals
Result:
- The 2 events still show.
--- Check the Option Filters, a 3rd condition is added and uses "OR"
If details.customer equal to only 'AIM'
OR deduplicationKey constains only 'aiopstracker'
OR summary equal to www.aiopstracker1.com: event tracker
OR deduplicationKey constains only 'aiopstracker'
OR summary equal to www.aiopstracker1.com: event tracker
Expectation:
- The event with Summary "www.aiopstracker1.com" only is displayed.
- The event with Summary "www.aiopstracker1.com" only is displayed.
Symptom
Events are not filtered based on the selected field.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSE9G0Q","label":"IBM Cloud Pak for AIOps"},"ARM Category":[{"code":"a8m3p000000PC55AAG","label":"Watson AIOps-\u003EAI Manager-\u003EAlert Viewer"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"4.10.0;4.10.1;4.2.0;4.2.1;4.3.0;4.4.0;4.4.1;4.5.0;4.5.1;4.6.0;4.6.1;4.7.0;4.7.1;4.8.0;4.8.1;4.9.0;4.9.1"}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Was this topic helpful?
Document Information
Modified date:
28 July 2025
UID
ibm17240815