Use the Filter Builder to construct filters for event lists.
The following figure shows the UNIX Filter Builder.
Figure 1. Filter Builder
on UNIX
The Filter Builder contains the following areas:
- 1 Filter setup area
- Use this area to define a name and to set permissions for the filter.
- 2 Button bar
- Use these buttons to define filter elements.
- 3 Graphical display area
- This area displays the element definitions for the current filter in a graphical tree structure that shows how the elements relate. You can add elements to the tree by using the buttons in the button bar. The element that is currently selected is shown with a red border around it. Editing is relative to the current element. When you select an element within this area, its details are shown and can be edited in the element definition area.
- 4 SQL display area
- The SQL display area shows the SQL as you build the filter. You can click Edit SQL in the button bar to edit the SQL directly within a Filter SQL Edit window.
- 5 Element definition area
- This area displays the details of the element that is currently selected, and enables you to specify a different set of values. Your selections are reflected in the graphical display area and the SQL display area.
- 6 Metric area
- Use the metric buttons to apply a measurement to the filter so that it calculates a useful figure. For example, a Sum of Tally metric gives the total number of deduplicated alerts in the ObjectServer.