|
|
|
You can set or edit filters to refine the displayed event or incident information. You can access the global filter dialog from the main CA Enterprise Log Manager window. You can add local filters from within an individual query or report display, or from the Incidents area. You can also use the Global filter interface to set application-wide query settings.
Each type of filter has its own creation dialog that is launched by a unique button:
Applies to all reports, queries you view in the current session only, and provides a way to view a wide variety of event types qualified in an identical way. The Global Filter button appears at the top of the main CA Enterprise Log Manager window beside the Log Manager Server menu. You can use a global filter to view all events received in the last week, or from a certain host, for example. You can also set global filters for Incidents, which are constructed in the same way, but apply only to incidents and their component event information.
Note: A global filter returning the last 6 hours of data is the default setting.
Applies only to the current report, query or incident view. The Local Filter button appears at the top of the details pane in query or report displays, and at the top of the Incidents pane. When you view a new report, the local filter is not applied or saved, unless you save the report as a favorite with that filter set. Local filters let you narrow a current view, to see only one host in a multi-host report view, for example, without changing other report views.
| Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |