Submit a ticketCall us

Training ClassThe Orion® Platform Instructor-led Classes

Provided by SolarWinds® Academy, these trainings will introduce users to the Orion Platform and its features, management, and navigation. These courses are suitable for users looking to discover new tips, tricks, and ways to adapt their Orion products to better suit their monitoring needs:
Deploying the Orion Platform
Configuring Orion views, maps, and accounts
Configuring Orion alerts and reports

Reserve your seat.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > LEM adding additional conditions to default filter

LEM adding additional conditions to default filter

Updated May 11th, 2016


This article provides brief information and a sample scenario on the key components to observe when modifying your filter. 

Editing an already existing filter: Software Installation/Update 

When you want to have an extra "not equal to" condition, but the modified filter does not appear to work.


For example:

Let's say you do not want to see any SoftwareUpdate events where the ToolAlias is equal to Vista Security.

You include this into the filter, but it does not appear to work. What's next?



LEM version 6.2


The issue is caused by misconfiguration.


Note: Pay attention to the Events and Fields that you are using.


In this example, we do not want to see any Software Update events with the Tool Alias equal to Vista Security.

 At the moment we tried the following:


This does not seem to work, however. 


A closer look:

  • We are using the event: SoftwareUpdate
  • Then, the field: ToolAlias
  • In the default condition, we already have SoftwareUpdate Event in its own group.       

Like below:                            


If this is the case, then we do not need to place the new condition in its own group. We should place it in the same group as the SoftwareUpdate since they both share the same event.

  1. Close (press the x) on the Group that has just the softwareupdate.toolalias not equals to Vista Security.

  2. Go back to the Events > SoftwareUpdate.

  3. Then to Fields : ToolAlias

  4. Then click on the ToolAlias and drag it over to the group section that just has SoftwareUpdate.

  5. Wait until you see a solid straight red line in the group, then drop the SoftwareUpdate.ToolAlias != Vista Security here.



In the end you will see the following:


-Conditions: -

Group: SoftwareInstall checkmark

Group: SoftwareUpdate checkmark & SoftwareUpdate.ToolAlias NotequalTo Vista Security

-End of conditions-


Like the following:


Click Save. 

Check under Monitor page, and this filter should then be working.




Last modified