To specify the Event Filter property
In the navigation pane, select the Resource Monitor Policies, Windows node and then select the desired resource monitor policy.
Select Event Logs.
In the details pane, select the Event Filter property and click the ellipsis (
) button on the right.The Event Filter Editor appears.
In the Event Filter Editor, you can add, edit, delete, duplicate, enable, and disable filter conditions:
To add a new filter condition, click the New button. See Defining a Filter Condition for further help on adding a new filter condition.
To edit an existing filter condition, click the desired filter condition to select it and then click the Edit button. See Defining a Filter Condition for further help on editing a filter condition.
To delete an existing filter condition, click the desired filter condition to select it and then click the Delete button.
To duplicate an existing filter condition, click the desired filter condition to select it and then click the Duplicate button.
To enable a filter condition, select the check box next to the desired filter condition.
To disable a filter condition, clear the check box next to the filter condition.
Save your changes.
Note: By default, two conditions are combined by logical operator “or.” You can combine the conditions using logical operators “or” or “and” as appropriate by using the drop-down list. The conditions combined with “and” will be grouped together. The conditions combined with the logical operator “and” will be applied first and then the conditions with “or” will be applied.
For example, if you have the following five conditions:
Condition1 “and”
Condition2 “or”
Condition3 “and”
Condition4 “or”
Condition5 “and”
The resultant condition will be as follows:
(Condition1 “and” Condition3 “and” Condition5) “or” (Condition2) “or” (Condition4)