Filtering
The Filter section selects the stored messages that a feature, report, or view tab uses, by severity, originators, and a filter expression. It works on messages already in syslog storage; to drop messages before they are stored, use the Incoming Filter.
Filter/Search section of a view/search preset
| Severity level |
Severities from Minimum to Maximum, both included ( |
| Originators |
ALL ORIGINATORS, <select originators> (a selected set), or Group: followed by an originator group name. |
| Filter expression |
Optional filter expression. When it is blank, the setting shows ALL MESSAGES and passes every message that matches severity and originators. |
| Narrow by severity and originators first. They use storage indexes, so they are much faster than an expression. |