Condition Filter

SentryOne allows you to build complex filters for the purposes of History Filtering and defining Condition settings. This topic covers the functionality of the Condition Filter that's common to History Filtering and Condition Settings.

Note:  The Condition Filter is case-insensitive for all string comparisons.

Condition Filter Overview

The following diagram identifies the various aspects of the Condition Filter.

SentryOne Condition Filter OverviewCondition Filter Overview

Condition Filter Rules

When using the Condition Filter, build criteria that an event must meet by defining rules. 

Each filter rule is made up of three distinct parts:

  • Column Name—Defines the scope of the rule.
  • Operator—(criteria operator) defines an instruction for testing the value (operand value).
  • Value—(operand value) for this filter rule.

Rule Groups

Individual rules are logically grouped into rule groups. Each group contains a logical operator that defines how the rules are combined within the group. Each group uses the And logical operator. When a group is created with the And logical operator, each filter rule that's part of the group must be true for the group to evaluate as true. Change the logical operator defined for a group by selecting it; a drop-down menu appears, allowing you to choose an alternative (And, Or, Not And, Not Or).

Context Menus

SentryOne And Context Menu

When you select any logical operator, additional options are available from the drop-down menu:

  • Add Condition—Adds a new filter rule to the condition group.
  • Add Group—Creates a new sub-group beneath the existing group with the default And Logical operator.
  • Remove Group—Deletes the selected group.
  • Clear All—Available from the root logical operator; deletes all filter rules.

Selecting the plus + symbol next to any group's Logical operator adds a new filter rule to the group. Selecting the x symbol next to any filter rule deletes that rule from the group.