Database Filter

To prevent unnecessary or unwanted log data entering in to EventLog Analyzer for processing ‘Database Filter’ is available. This will reduce the log noise and allow only necessary logs to get processed.

• Create Database Filter
• Create IBM iSeries (AS/400) Database Filter

Create Database Filter

To create a log database filter, use the following menu option:

• Tabs: +Add > Filter
• Settings tab > Database Filter > Add

To create a database filter, follow the steps given below:

In this screen, select the event filter option, filter parameters, required Windows Event ID, event type and severity. 

1. Enter an unique name for the database filter

2. Select the Basic or Advanced event filter option. In the Basic filter option, basic matching is done on the Log Message Contains and Except filter. In the Advanced filter option, 'Match Any' or 'Match All' criteria is applied on the Log Message Contains and Except filter.

3. Fill the appropriate filter criteria. Log Message Contains – use this to filter the logs for a specific word or phrase

4. Except - use this to exclude the logs if it contains a specific word or phrase

5. Event Source - use this to filter the logs for a specific event source

6. User - use this to filter the logs for a specific user

7. Select Windows or Syslog to be filtered

8. Enter the Event ID(s) to filter the logs.

9. In case of Windows Event log or Syslog, filter the logs by event type(s) and / or severty(ies)

Navigate to the next screen with Next > > button

10. Select the host group(s), host(s) for which the log to be filtered

11. Complete the database filter creation with Finish button

How to edit/delete database filter?

Edit/ Del menu will take you to the Filter Details table, where all the database filters are listed.
How to disable/enable database filter?

1. Use the Enable/Disable icon to enable or disable the filter

How to edit filter?
On the table row of a specific filter Edit icon is available.

2. Use the Edit icon to edit the selected filter.

How to delete filter?

3. Select the database filter(s) by selecting the respective check box(es)

4. Delete the filter(s), using the Delete menu link.

Filter Details
In the Filter Details table, all the filters created are displayed with the enable/disable option, edit option, delete option, name of the filter, type of filter (Windows, Linux), host(s) and host group(s) associated to the filter.

IBM iSeries (AS/400) Database Filter

Ensure that at least one IBM iSeries (AS/400) host is added in EventLog Analyzer. To create IBM iSeries (AS/400) database filter, use the following menu options:

• Tabs: +Add > AS/400 Filter
• Settings tab > Configuration section: Database Filter > AS/400

To create a database filter, follow the steps given below:

In this screen, select the event filter option, filter parameters, required Message ID, severity and job name. 

1. Enter an unique name for the database filter

2. Select the Basic or Advanced event filter option. In the Basic filter option, basic matching is done on the Drop the Logs Containing and Except filter. In the Advanced filter option, 'Match Any' or 'Match All' criteria is applied on the Drop the Logs Containing and Except filter.

3. Fill the appropriate filter criteria. Drop the Logs Containing– use this to filter the logs for a specific word or phrase

4. Except - use this to exclude the logs if it contains a specific word or phrase

5. Event Source - use this to filter the logs for a specific event source

6. User - use this to filter the logs for a specific user

7. Select event severity to be filtered

8. Enter the IBM iSreies Message ID(s) to filter the logs.

9. Filter the logs for specific job names

Navigate to the next screen with Next > > button

10. Select the IBM iSeries (AS/400) host group(s), host(s) for which the log to be filtered

11. Complete the database filter creation with Finish button