Administration Guide › Queries and Reports › How to Create a Query › How to Set Result Conditions › Set Display and Group Conditions

Set Display and Group Conditions

You can set conditions that allow you to control the query display and conditions that search for events based on how they are grouped.

To set display and group conditions

1. Open the result conditions dialog.
2. If you are creating a scheduled report job or action alert job, click the Events or Incidents tab to set the appropriate filter type. Since a report or alert job can contain both event and incident queries, you can set the filter types separately.
3. Use the Results check boxes to enable any of the following display qualifications you want:

   Default Query Limit

   This value is only available for Action Alerts and Report Scheduling. It sets the alert or report job to use the row limit of the individual queries in the job. If you select any other results value when creating a job, CA Enterprise Log Manager overrides the row limits in the component queries.

   Row Limit

   Sets the maximum number of event rows that the query displays, starting with the most recent events.

   No Limit

   Sets the query to retrieve all events that match its filter. This can include a large number of events so you should plan the query accordingly.

   Show Other

   Indicates the presence of other results that are not displayed due to the row limit, allowing you to compare the selected events in the context of all events of that type. For example, if you choose a row limit of 10 for your event viewer display and select show other, events beyond 10 are displayed as a single entry titled Other, showing all remaining events. This setting is only effective when row limit is selected.

   Time Granularity

   Sets the detail level of the time period field used in the query display.

4. Use the Result Conditions to query for various types of grouped event conditions. For example you could set your query to search for the latest grouped event after a selected date, or a certain number of grouped events. A grouped event is a refined event for which you have set a Function and Group Order in the Query Creation step.

   The group conditions use the same time statement system as the time range fields.

5. Click the appropriate arrow to advance to the Query Design step you want to complete next, or click Save and Close.

   If you click Save and Close the new query appears in the Query List, otherwise the Query Design step you choose appears.

More information:

How to Set Result Conditions