Alert Management Overview › View Alerts, Alert Details, and Extended Information › Create an Alert Filter

Create an Alert Filter

An alert filter limits the number and alert types that are shown on the Operations Console. For example, you might filter alerts with the severity Minor from devices you are not responsible for monitoring, or that are acknowledged. You can suppress alerts based on information in the following tabs:

Severity

Lets you filter alerts based on severity. The available severities are Unknown, Down, Critical, Major, and Minor.

Note: By default, alerts with a severity or Unknown are automatically converted to Minor.

Service Impact

Lets you filter alerts based on service impact. The available service impact values are Down, Moderate, None, Severe, and Slight.

Family

Lets you filter alerts based on a specified grouping of classes. The filter hides any alert belonging to a family that you hide.

Class

Lets you filter alerts based on the USM type of the CI that caused the alert.

State

Lets you filter alerts based on the acknowledged state and context.

Attribute

Lets you filter alerts based on specific attribute values.

You can create simple alert filters in which all conditions set on all tabs must be met for alert suppression. Alternatively, you can create complex alert filters, in which you use OR logic to create several filtering conditions independent of one another.

Follow these steps:

1. Open the Operations Console and click an item displayed in the left pane that has the alerts you want to filter.

   The right pane refreshes to display alerts for the selected items.

2. Right-click an alert in the right pane, and select Set Filter from the shortcut menu.

   Note: Alternatively, you can select the alert and click the Filter button on the toolbar.

   To create an AND expression, navigate the tabs as described in Steps 3 through 6.

3. (For the Severity, Service Impact, Family, and Class tabs) Select the alert severities, impact values, families, and classes to filter in the Show pane of each tab, and click the Add Selected button .

   The selected values appear on the Hide pane of each tab.

4. Click the State tab, and use the following panes to configure state filtering:

   Acknowledged State

   Lets you filter alerts by whether they are acknowledged. Select Acknowledged to show only acknowledged alerts; select Not Acknowledged to show only unacknowledged alerts. The default setting (Both) does not filter alerts by their acknowledged state.

   Selected Context

   Lets you filter alerts by your selection and the alert context.

   Select the 'Show Only Service Alerts For Services/All for Infrastructure Items' check box to show only service alerts when you select a service in the Operations Console. When you select this setting, infrastructure alerts only display when you select their corresponding CIs.

   The 'Hide Alerts for Services and Infrastructure Items that are currently in Maintenance' check box, which is selected by default, hides alerts for services and CIs in maintenance.

5. Click the Attribute tab, select an attribute (which includes CA SOI attributes and a subset of USM attributes for the associated CI) on which to filter, a comparison type, and a comparison value for the attribute, and click Add.

   Note: To use regular expressions, select Matches regex from the Comparison Type drop-down list. Click Test Regex to open the Regex Tester and test the regular expression against a string. Regular expressions are not available for all attributes.

   The attribute expression appears in the lower pane.

6. (Optional) Add more attribute filters and create advanced logic using the logic buttons on the right of the dialog.

   For more information about creating advanced attribute filters, click the Hints link above the expression pane.

   Note: If you want to create a simple alert filter with no advanced logic, omit Steps 7 through 9 and continue with Step 10.

7. Click Show Advanced.
8. Click Add.

   An expression appears in the text pane that links all conditions you specified using AND logic.

   Note: Some conditions display the hidden values while others display the shown values, depending on the text length of each option. The Severity condition always displays the hidden values (such as Severity (Hide Minor)) and the Service Impact condition always displays the shown values (such as Service Impact (Show Moderate, Severe) regardless of text length.

9. Create additional conditions using the Alert Filter tabs, and click Add when you finish.

   Each additional expression appears in the text pane related to every other condition with an OR operator. Therefore, add all conditions that you want linked by AND logic in the same expression. Separate conditions into different expressions to link them through OR logic.

10. Click Add at the bottom of the dialog when you finish.
11. Enter a filter name and click OK.

    Note: The filter name must have fewer than 47 characters to prevent window display distortion.

12. Click OK on the Alert Filter dialog.

    The filter is created.