Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Archive > 2017September13 - EOC > Filter and group data in resources

Filter and group data in resources

Created by Anthony.Rinaldi_ret, last modified by Gerald.Prado on Sep 13, 2017

Views: 68 Votes: 0 Revisions: 5

You can reorganize and filter data from your SolarWinds Servers within a resource if your role allows personalizations. You can group data by category, and you can filter data by SolarWinds Server or by using a SQL-like filter syntax.

Group node data by category

  1. Log in to the SolarWinds EOC Web Console.
  2. Click Edit on the resource that you want to change.
  3. Select the category that you want to group by from the Level 0 list.
  4. If you want to group by more subcategories, select additional categories from the Level 1 and the Level 2 lists.
  5. Click Save.

Filter data by SolarWinds Server

  1. Log in to the SolarWinds EOC Web Console.
  2. Click Edit on the resource that you want to change.
  3. Select check boxes next to the SolarWinds Servers you want to see data from.
  4. Clear the check boxes next to the SolarWinds Servers you do not want to see data from.
  5. Click Save.

Filter data using filter criteria

The following procedure explains how to limit the data a resource shows by specifying filter criteria using SolarWinds Query Language (SWQL) syntax.

  1. Log in to the SolarWinds EOC Web Console.
  2. Click Edit on the resource that you want to change.
  3. Type your filter criteria in the Filter Nodes SQL field.
  4. Click Save.

Construct your filter

You can filter event, interface, node, SolarWinds Server, and volume data by either their built-in properties or custom properties. You can do the same for data from all of the SolarWinds Servers SolarWinds EOC supports.

All of the examples and values in this section are case-sensitive.

Filter by built-in properties

Unlike other SolarWinds products, you have to look up two things in SolarWinds EOC to create a filter that references a built-in property:

When you put the SWQL alias and the property name together with a period in the middle, you form a reference to the built-in property that you can then use in your filter.

To construct a filter using a built-in property:

  1. Browse the SWQL resource matrix and find the resource you want to filter.
  2. Get the alias used by the resource for the data type you want to use.
  3. Get the property by browsing the following tables:
  4. Combine alias and property with a period (.) to form the fully-qualified property reference alias.property.
  5. Use the fully-qualified property reference in the Filter Nodes SQL field for the resource.

The following table illustrates an example of this procedure using two resources with different aliases for the EOC.Node property. The example shows all nodes from Cisco devices.

Resource Alias Built-in Property Filter Example

Global Node Status by Site

Node

Vendor

Node.Vendor = 'Cisco'

Global Top XX Errors & Discards This Hour

N

Vendor

N.Vendor = 'Cisco'

Filter by custom property

SolarWinds EOC uses different SWQL aliases in each resource for the SWIS entities they query.

To filter by custom property:

  1. Determine the appropriate alias using the SWQL resource matrix.
  2. Construct your filter using the following syntax: alias.customProperty.propertyName

The SWIS entities that support custom properties are:

  • EOC.Interface
  • EOC.Node
  • EOC.Volume

If a resource does not have an alias for EOC.Volume, but includes an alias for EOC.Volume.Stats, address the volume custom property as follows:

Resource Alias Custom Property Syntax

Global Top XX Volumes by Disk Space Used

VS

VS.Volume.CustomProperty

Example filter to only show nodes with the custom property City that matches Atlanta:

Resource Alias Custom Property Filter Example

Global Node Status by Site

Node

City

Node.CustomProperty.City = 'Atlanta'

Global Top XX Errors & Discards This Hour

N

City

N.CustomProperty.City = 'Atlanta'

Filter with the wildcard character

The wildcard character in SWQL filters is %, as in:

Node.Vendor Like 'Nortel%'

Filter with SWQL operators

SWQL uses the following operators:

Operator Definition

>

greater than

<

less than

=

equal to

<>

not equal to

>=

greater than or equal to

<=

less than or equal to

Like

comparison operator for use with the wildcard character

AND

groups two adjacent conditions

OR

specifies either of two adjacent conditions

Filter by the Status property

To filter by the Status property, use the following status levels:

Level Status

0

Unknown

1

Up

2

Down

3

Warning

Example filter to only show nodes that are not Up:

Node.Status<>1

Last modified
09:58, 13 Sep 2017

Tags

Classifications

Public