System Monitoring Filters

Filters restrict the audit messages that are monitored. A filter defines a match criteria that must be met to trigger a notification.

To define a filter, specify which level of audit message to monitor and assign a target. Messages may be further filtered by specifying a field on the audit message and a value. System monitoring will notify you when that field of the audit message type contains the specified value.

It is possible to assign multiple filters to a target. In that case, the notification target will only be triggered when the match criteria of all assigned filters are satisfied. For more information about recommend targets and events, see Best practices: System monitoring with SNMP/SMS/email targets.