Event Filter Builder window: Extended Attributes page

Use this page to qualify the filtering criteria using additional keywords and keyword values that can be associated with some categories of events, such as SNMP. These additional keywords and corresponding values are referred to as the event's extended attributes. Extended attributes can be particularly useful for narrowing the filtering criteria to a lower level of detail, for example, to isolate one or more values originating from a specific system.

You cannot specify keywords and values on the Extended Attributes page in the following situations:
  • If you have selected multiple event types or if the Any check box is selected on the Event Type page, the Extended Attributes page is disabled. You must select only one event type to specify extended attributes.
  • If the Extended Attributes page is enabled for a specific event type but no keywords are listed, IBM® Systems Director Server is not aware of any keywords that can be used for filtering.
When you specify extended attributes for filtering, an event must meet the following filtering criteria:
  • If you select multiple keywords, all values received must match all values of all selected keywords (Boolean AND).
  • If you specify multiple values for a single keyword, the values received must match at least one of the values specified for the keyword (Boolean OR).
Because event types are hierarchical, an event has its extended attributes as well as the extended attributes of its parent event types. For example, the event type Director>Topology>Offline has extended attributes for Director>Topology>Offline and Director>Topology.
Note: To determine what extended attributes an event provides, see the documentation for that specific event in "Events."

Fields

Any
Specifies whether you want to filter on specific extended attributes. By default, Any is selected. You must clear the Any check box to select specific keyword and value pairs.
Keywords
Specifies the keywords on which you want to filter. If no keywords are listed, IBM Systems Director Server has not been made aware of or has not published the keywords for the selected event category. You can select multiple keywords.
Values
Specifies a value for the keyword on which you want to filter. You can specify multiple values, but you cannot specify a range of values.

If you want to enter multiple values for a single keyword, click Add each time you want to add a value. The Boolean OR operator is used to determine whether an event's extended attributes meet the filtering criteria for multiple values of a single keyword. If you enter more than one keyword and value pair, the Boolean AND operator is used to determine whether an event's extended attributes meet the filtering criteria, that is, all keyword values must be true.

Case sensitive
Select this option if you want the specified keyword value to be filtered as case sensitive.

Actions

Update
Changes the value of a selected keyword and value pair. Use this procedure:
  1. Select a keyword and value pair.
  2. Select Values to change the corresponding value.
  3. Click Update to make the change take effect.
Delete
Deletes a selected keyword and value pair as a selection criterion.
Related concepts

Simple event filter
Duplication event filter
Exclusion event filter
Threshold event filter
Related tasks

Selecting specific events for filtering

Table of Contents