TechLibrary

Table of Contents

Guide That Contains This Content

[+] Expand All

[-] Collapse All

Managing Filters in the Event Viewer

You can edit, save, delete, or search filters on the Event Viewer page. To open the filter options, select Security Director > Event Viewer> Load Filters on the Event Viewer page.

You can perform the following tasks:

Using a Load Filter Selections

To use load filters:

On the right side of the Event Viewer page, select Load Filter.
The drop-down lists the available filters.
Select one of the filters available in the drop-down box.
The Event Viewer page displays the filter details.
To search filters, type the filter name in Load Filter search bar and click Search.
Filters matching your search criteria are displayed.

Using the Filter Manager

To use the filter manager:

Select Load filters.
The saved filters is listed. Only 10 filters are displayed in the load filter drop-down box.
To view more filter, select Load filters>More Filters.
The Filter Management window appears.
Under Actions, select one of the following :
- Duplicate—Creates a copy of the filter.
- Rename—Provides the option to rename and save the filter.
- Edit Description—Provides the option to edit the filter description and save the filter.
To view existing filters, select one of the following:
- All Saved Filters—Displays all the saved filters.
- My Filters—Displays the filters you created.
- Default Filters—Displays the default filters.
The requested filter are displayed.

Searching Filters in the Filter Manager

To search an Event Viewer filter:

Select Load filters>More Filters.
The filter management window is displayed.
In the search bar, type one of the following:
- Name
- Description
- Created by
- Date Last Modified
The requested filter are displayed.

Editing Event Viewer Filters

To edit an Event Viewer filter:

Select a filter.
The filter details are displayed in the filter bar.
Edit the filter string.
Click Save.
The filter is saved and the database is updated.

Saving an Event Viewer Filter

To save an Event Viewer filter:

Select a filter.
The Filter Management window is displayed.
Edit the filter string.
Click Save.
The filter is saved and the database is updated.

Deleting an Event Viewer Filter

To delete an event viewer filter:

Select Load filters>More Filters.
The filter management window appears.
Select the filter.
On the left side of the Filter Management page window, click the delete button (-).
The delete confirmation window displays the message, Do you wish to permanently delete the selected filter?
Click Yes to confirm deletion.
The selected filter is deleted.

Note: To delete multiple filters, select the filters using the check box and click the delete icon (-).

You can delete filters only if you are the administrator of the domain or have created the filter.