Submit a ticketCall us

Looking to compare latest NPM features with previous versions of NPM?
The NPM new feature summary offers a comparison of new features and improvements offered with this release.

 

 

 

 

Home > Success Center > Log & Event Manager (LEM) > How to Create a Filter to Display FIM Data

How to Create a Filter to Display FIM Data

Table of contents
Created by Erica Gill, last modified by MindTouch on Jun 23, 2016

Views: 989 Votes: 0 Revisions: 4

Overview

This article describes how to build a filter to display data collected by FIM events.

Environment

  • LEM 6.1
  • LEM 6.2

Steps

  1. In the LEM Console, go to Monitor.
  2. Click the + icon on the upper left hand corner of the screen to add a New Filter.
  3. In the Filter Configuration window, add a filter name and using drag and drop across the appropriate filters to the Condition pane.
    • For example, to filter for read events from a FIM connector for one particular file on one particular server use:
      • FileRead.DetectionIP =<IPAddressofMonitoredHost>
      • FileRead.ToolAlias=<ConnectorName>
      • FileRead.FileName=<FullPathofFile>
    • For example,
      • FileRead.DetectionIP =10.10.4.125
      • FileRead.ToolAlias=FIM File and Directory
      • FileRead.FileName=G:\SolarWinds\Area51\RestrictedFile.txt

Note: When working with filters an iterative approach, building a general filter and then narrowing down the filter based on the events filter can be the best way to narrow down to very specific events.

Last modified
20:01, 22 Jun 2016

Tags

Classifications

Public