Thanks for posting! You can create an Exclude Filter to block out those times. The procedure is nearly identical to creating an Include/Action Filter, except you click Alerts, then Filters, the right-click Exclude Filters and Create New Exclude Filter.
The time ranges seem to be set at the filter level. My understanding of the time/data ranges is "select when you want the filter applied, leave everything blank to always allow." There wouldn't be a way to say, "Allow from 12am - 5am, then disable, then allow again from 6:30am-11:59pm" Would I create two?
DELL-Jeff M
2 Intern
•
793 Posts
0
January 6th, 2009 15:00
Thanks for posting! You can create an Exclude Filter to block out those times. The procedure is nearly identical to creating an Include/Action Filter, except you click Alerts, then Filters, the right-click Exclude Filters and Create New Exclude Filter.
joekeg
4 Posts
0
January 8th, 2009 07:00
I cannot find a time exclude, here are the steps I'm offered:
Severity
Alert Category
Duplicate Alert Correlation
Device/Group Configuration
Summary
Am I missing something?
DELL-Jeff M
2 Intern
•
793 Posts
0
January 8th, 2009 16:00
If you don't see it there, look at the Alert Actions setup wizard, I think the time limitations can be set there.
joekeg
4 Posts
0
January 9th, 2009 06:00
The time ranges seem to be set at the filter level. My understanding of the time/data ranges is "select when you want the filter applied, leave everything blank to always allow." There wouldn't be a way to say, "Allow from 12am - 5am, then disable, then allow again from 6:30am-11:59pm" Would I create two?