Condition Filter

SentryOne allows you to build complex filters for the purposes of History Filtering and defining Condition settings. This topic covers the functionality of the Condition Filter that's common to History Filtering and Condition Settings.

Note:  The Condition Filter is case-insensitive for all string comparisons.

Condition Filter Overview

The following diagram identifies the various aspects of the Condition Filter.

SentryOne Condition Filter Overview DiagramCondition Filter Overview

Condition Filter Rules

When using the Condition Filter, build criteria that an event must meet by defining rules. 

Each filter rule is made up of three distinct parts:

OptionDescription
Column NameDefines the scope of the rule.
Operator(Criteria operator) defines an instruction for testing the value (operand value).
Value(Operand value) for this filter rule.

Rule Groups

Individual rules are logically grouped into rule groups. Each group contains a logical operator that defines how the rules are combined within the group. Each group uses the And logical operator. When a group is created with the And logical operator, each filter rule that's part of the group must be true for the group to evaluate as true. Change the logical operator defined for a group by selecting it; a drop-down menu appears, allowing you to choose an alternative (And, Or, Not And, Not Or).

Context Menus

SentryOne Condition Settings Logical Operator Context Menu

When you select any logical operator, additional options are available from the drop-down menu:

OptionDescription
Add ConditionAdds a new filter rule to the condition group.
Add GroupCreates a new sub-group beneath the existing group with the default And Logical operator.
Remove GroupDeletes the selected group.
Clear AllAvailable from the root logical operator; deletes all filter rules.

Selecting the plus + symbol next to any group's Logical operator adds a new filter rule to the group. Selecting the x symbol next to any filter rule deletes that rule from the group.