Adding Syslog Exclusion Filters

Exclusion Filters restrict what information is used to generate Reports. This is achieved by filtering out syslogs (based on the criteria specified in the Syslog Filter screen) from being uploaded to the Reports database. These filtered syslogs are, however, stored in the file system and archived, thus ensuring that all syslogs are available for audit trailing purposes. Excluding data from being uploaded to the Reporting database in this way can be useful in maintaining confidentiality regarding use history, or eliminating data corresponding to certain users who are not of interest. For instance, you might use an Exclusion Filter to eliminate data from the company CEO. This screen is used to specify syslog filters for the unit selected in the TreeControl. A similar screen exists for system wide syslog filtering, in the Console Panel’s Reports > Syslog Filter screen.

1	To add an Exclusion filter, click on Configuration > Filters.

The Syslog Exclusion Filter page comes up. This page allows you to view what filters are currently applied, add filters, or remove filters.

2	To configure and add an Exclusion Filter, click Add Filter. The Add Filter menu comes up.

 

3	Specify the field you want to modify, and select an operator and value. Click Update.

The Reports are now filtered according to the selected criteria. Exclusion Filter settings are picked up by the Summarizer at specified regular intervals.