Enterprise SIEM, Centralized Log Management, Security, Compliance, Server Monitoring and Uptime Monitoring Software
Table of Contents

Filters

A Filter is a configurable object used to target or limit specific log entries or computers from real-time and consolidated log views, monitors and reports. Filters can also be used when manually searching computers in Active Directory or through an Auto Configurator.

How it works:

Once assigned to a log viewer, report or Auto-Configurator, the filter is applied to the data set. Entries that pass the filter criteria are included in the final data set. When using the Agent-Based Log Consolidation Templates, consolidation filters are applied on each remotely managed host prior to the data set being transmitted on the network.

Server Manager includes numerous sample Filters. You have the option of assigning these filters to executables as is, modifying them or if prefer, removing all of them and defining your own. To view the sample filters, from the Explorer View, expand the Filters node then select Sample Filters.

To create a filter from a Log Viewer:

  • From the Log Viewer, find an entry you would like to either include or exclude from the viewer, then right click and select Filter Selected Entries. The Filter Selected Entries View displays.
  • Use the Visibility drop-down to configure to either include or exclude the selected entries.
  • Depending on the type of log entry, check the Include the message in the filter option to include the entire message in the filter.
  • Choose to either Create a new filter or Append to an existing filter. If you choose to create a new filter,
    • Use the Name text box to specify a unique name to identify the filter.
    • Use the Filter type drop-down to select the type of filter to create.
    If you choose to append to an existing filter,
    • Use the drop-down to select the filter to append these entries.
  • Click OK. The filter is either created or appended to, then the Filter Properties View displays.
    If you chose to include the message in the filter, remove all entry specific data from the filter criteria (e.g. Date and Time).

To create a filter:

  • From the Menu Bar select File | New. The Create New Object View displays.
  • From the Create New Object View, select Filter. The Filter Properties view displays.
  • Configure the filter.
  • When you have finished configuring the filter, click the OK button to save.

Available Filter Types

TypeDescription
SimpleA simple stacked list of criteria that can be ordered and flagged to either include or exclude specific contents.
ComplexA hierarchal tree of criteria that resembles a computer programming language but is configured through a graphical user interface.
C# ScriptProgram your own filters using C# script.

Sample Event Log Filters

The following screenshots show the same filter implemented using each method.

Sample Simple Event Log Filter:

List View

Table View

Sample Complex Event Log Filter:

Sample C# Script Event Log Filter:

Related Topics

Simple Filters

Complex Filters

C# Script Filters

Templates

Reports

Auto-Configurators