You can set or edit filters to refine the displayed event or incident information. You can access the global filter dialog from the main CA User Activity Reporting Module window. You can add local filters from within an individual query or report display, or from the Incidents area. You can also use the Global filter interface to set application-wide query settings.
Both filters have their own creation dialog. A unique button launches each dialog:
Applies to all internal reports, queries you view in the current session only. Global filters do not apply to external ODBC queries or reports. The Global Filter button appears at the top of the main CA User Activity Reporting Module window beside the Log Manager Server menu. You can use a global filter to view all events received in the last week, or from a certain host, for example. You can also set global filters for Incidents, which are constructed in the same way as event filters. Incident filters only apply to incidents and their component event information.
Note: A global filter returning the last six hours of data is the default setting.
Applies only to the current report, query, or incident view. The Local Filter button appears at the top of the details pane in query or report displays, and at the top of the Incidents pane. The local filter is not applied or saved when you change reports, unless you save the report as a favorite with that filter set. Local filters let you narrow a current view, to see only one host in a multihost report view, for example, without changing other report views.
Note: You can only set advanced filters from the local filter dialog if your query is an ODBC query.
This section contains the following topics:
|
Copyright © 2013 CA.
All rights reserved.
|
|