Extreme Networks EPICenter Reference Manual page 111

Value The value against which the parameter (specified in the Field field) should be tested. The type,
format and range of the values you can specify depend on the parameter you selected in the Field
field. Values may be entered as follows:
• Log ID: An integer. You can test equality relationships (equal, not equal, greater than, less than,
greater than or equal, less than or equal) or for a range (Between). If you choose Between as the
operator, you are asked to enter two values.
• Alarm Name: Text string. You can select an alarm name from the drop-down list in the Value field,
or enter a text string. You can test for an exact match or non-match, or a substring (Contains).
The Contains operator lets you match against a substring (portion of text) that should be
contained in the parameter value.
• Category: Text string. You can select a category from the drop-down list in the Value field, or
enter a text string. You can test for an exact match or non-match, or a substring (Contains).
• Severity: An alarm severity level. You must select a severity level from the drop-down list in the
Value field. You can test for a match or non-match.
• Source IP: IP address. Can test for exact match or non-match, or for a range (Between). If you
choose Between you are asked to enter two values. You cannot match on a subnet.
• PortIfIndex: An integer. Can test equality relationships (equal, not equal, greater than. less than,
greater than or equal, less than or equal) or for a range (Between). If you choose Between you are
asked to enter two values.
• Time: Select a time period from the drop down list. Choices include periods such as Last 1 Hour,
Yesterday, 2 Days Ago, etc. The filter matches all alarms within the time period.
• Acked: Can select Yes (matches all Acknowledged alarms) or No (matches all unacknowledged
alarms).
3 Click the Add/Modify Condition button to add this specification to the filter definition.
You can create a filter that uses more than one condition, as long as each condition uses a different
parameter. Multiple conditions are combined using a logical AND function—all conditions must be
matched for an alarm entry to be included in the filter results.
You cannot filter using multiple specifications of the same parameter. For example, in order to find
and view alarms for IP addresses 10.205.0.55 and 10.205.0.61, you must use the Between operator to
test for all Source IP addresses between these two IP addresses. You cannot create a filter that
includes separate condition specifications for Source IP = 10.205.0.55 and Source IP = 10.205.0.61.
4 To remove an individual condition specification, select it in the current filter list and click the
Remove Condition(s) button. You can select and remove multiple filter criteria.
5 When your filter definition is complete, you can save it as a named filter, or you can just apply it to
the Alarm Log without saving it.
To save it, click Save, and enter a name into the dialog box that appears.
●
To apply the filter to the Alarm Log summary without saving it, click OK. This filters the display
●
based on the criteria you defined. You do not need to save the filter before you do this.
If you do not save the filter definition before you apply it to the Alarm Log, you can re-open the
Define Alarm Log Filter window and save it later. The filter definition is retained in the Define
Alarm Log Filter window until you either create another filter definition, or exit the Alarm System
applet.
To restore the default filter definition, click the View last 300 alarms check box and click OK.
EPICenter Reference Guide
Defining an Alarm Log Display Filter
111