|
SyslogServer Suite |
| Presentation >> |
|
Software components |
|
Customer Support |
|
6. Using filter groups All
active filters are superimposed on each other, including the Quickfilters. By
using a combination of filters and negative filters, indeed specific types of
entries can quickly be identified. By use of negative filters, the unexpected
entries can easily be found - providing possibly important information.
An
example: |
|
|
|
In this example, two filters have been specified. One specifies all network equipment, the other one all production services. Also, a Quickfilter (below the drop-down menu in the picture) specifying a severity level of Notice or higher is used. The result; Display all non-normal entries from our production services on our network equipment. Specifying a
few groups of general filters, whether based on operating system,
location, organizational unit or criticality - is a recommendation to get
the most out of Datagram Syslogserver Suite. This usually,
but not always, means to specify a group of hosts in
a filter. Other combinations are also possible - although sometimes requireing a small modification
to the SQL syntax - see the advanced chapters for
general information about modifying the SQL syntax.
A generic
filter example: |
|
|
|
|
|
