OVNM 5.3 - Operations Agent for NonStop Event Management Guide for Windows

Filtering Events 26
3 Filtering Events
3-1 EMS Filters
HP NonStop server can have more then one distributor. Every distributor can use one or more collector and every
EMS collector and distributor (except the compatibility distributor) can use one or more filters to determine
whether or not to forward specific event messages to their destinations. These filters can select messages in a
way that is as detailed and complex as you care to make it. For example, you can design an alternate collector
that filters out all events of a certain type from its event log, a forwarding distributor that forwards only critical
event messages, a printing distributor that prints only action event messages, and a consumer distributor that
returns only Pathway event messages.
By default, OVNM distributors use the PASSALL filter, which passes all the messages, which are then forwarded
to the HP Operations Manager console.
In order to establish a selective display of messages to the HP Operations Manager console, use the following
methods:
1. Modify the PASSALL filter.
2. Write your own filter and use it in the Event server.
3-2 Filtering at the HP Operations Manager Console
The messages that appear in the active messages browser are received from the nodes managed by the
management server, as configured by the administrator. However, by setting filters in HP Operations Manager,
you can further customize this display to show only those messages that match the criteria you set.
Messages can be filtered using one or more of the following criteria:
• Message Text: Filter messages containing specific text.
• Severity: Filter messages of the selected severity.
• Ownership: Filter messages of various ownerships.
• Unmatched: Filter messages that either do or do not match any of the message conditions or suppressed
conditions defined in the policies deployed on the managed nodes.
• Time: Filter messages created at particular dates and times.
• Application: Filter messages on the application message attribute.
• Object: Filter messages on the object message attribute.
Because you can select multiple properties for a filter, you can create a filter to display just those messages that
matter most to you. For example, you could create a filter that would display only messages from a particular
service on a particular node, created between specified dates and times.
You can name and save the filters you create and use them again. If you then save your workspace as an .msc
file, the filters are saved as part of that customized view and are available whenever you are in that view.
NOTE: HP Operations Manager Filtering causes messages to be sent to HP Operations Manager console for
processing. This not only causes unnecessary network traffic, but also causes the HP Operations Manager
Management Server to do extra processing. HP Operations Manager policy filtering is best used to assign an
operator-initiated or automatic command.