MonitorWare Knowledge Base

[Bob Warren]

Not sure if this is the right forum:

I would like to create some more complex filters by combining ANDs and ORs. I am confused how to do this unambiguously since there does not appear to be any grouping mechanism (like parentheses). So, for example how could I build a filter that implements:

(condition "a" AND condition "b")
OR
(condition "c" AND condition "d")
OR
...
where "condition a" would be one of the choices like "syslog priority < 4", etc.

Thanks,
Bob Warren
SRC

[Usman Khawaja]

Dear Bob Waren

Many Thanks for contacting Adiscon Support.

In order to create more complex filters for the conditions stated below, please follow the instructions given below.

(condition \"a\" AND condition \"b\")
OR
(condition \"c\" AND condition \"d\")
OR
...
where \"condition a\" would be one of the choices like \"syslog priority & 4\", etc.

1- First create a Rule set and add rule to this set. Click on the Filter Conditions of that rule set. You will see the defualt form for filter conditions. By default there is AND condition set int he filter condition form. You can change that operator to OR/XOR/NOT/TRUE/FALSE by double clicking on the AND operator.

2-Now Click on the AND operator from the TOOL bar shown on right side of the filter conditions form (in Monitorware agent) in order to AND the conditions a and b. right click on the AND (which you just added) operator and Add filter conditions.

3- Now again click on the OR operator at the TOP and insert another AND operator from the tool bar. Follow the same process which you did in setp-2. i.e. right click on the AND operator and add filter conditions c and d. You can create an many AND conditions as you like in order to implement the OR operator among them.

Please have a look at the attached picture. It will help you more in order to understand how to create more complex filters.

Do not hesitate to contact us if we can be of any further assistance.

Best Regards,

Usman Khawaja
Adiscon

[/img]

[Bob Warren]

Thanks. I see how it works now. Looks like old HP calculator "Reverse Polish Notation" to me.

I do think some king of "grouping operator" would make creating these kind of rules a bit more intuitive, though.

Also, I sent your support group a message regarding problems I encountered when adding a new rule and moving it up. I would advise others *not* to move rules around - it tends to trash the filters on rules that get "mnved over".

Bob Warren

[Usman Khawaja]

Dear Bob

Many thanks for contacting Adiscon Support.

1 Point
Well...thank you very much again for your suggestion and we will try to accomodate this option (asking a confirmation before deleting a rule) in our next upcoming version of MW Agent. We look forward to such suggestions and really appreciate your feedback.

2 Point
In the recent version of MW Agent there is no feature of saving the settings after deleting a rule. Once you delete a rule it really gets "Deleted", you can not revert back to your previous settings by just closing the MW client window. So make sure if you really want to go ahead with deleting a rule before actually deleting it. But this works in the case of Filter Conditions. If you delete some filter conditions by mistake and you want your settings back. You can have it by just closing the window (without click on save button) and open it again, you will see your same filter conditions again.

3 Point
I reproduced the scenario, which you mentioned, in our test lab and i found out that the problem is not with the Rules Moving Up/Down. Rules Moving Up/Down has been fixed by our developers , the real problem lies in the Save button. Once you define the filter conditions for some rule, in order to save the settings you must click on "save and close" button, just clicking the "Save" button would not save your filter condition settings. This is the reason because of which your settings of filter conditions get removed when you move the rules up and down. I know this is BUG in MW Agent Client. Save button functioanlity is not correct. We, developers team at Adiscon , will make sure that this problem gets solved as soon as possible. Again thank you very much for making us look in to this problem and identifying it.