Event Processing Filtering Script

Reply to Event Processing Filtering Script on Wed, 18 Mar 2020 08:48:57 GMT

victor — Wed, 18 Mar 2020 08:48:57 GMT

Hi,

OID of what? Device or specific DCI you are fetching?

Best regards,
Victor

Reply to Event Processing Filtering Script on Tue, 17 Mar 2020 03:35:07 GMT

LogicalNZ — Tue, 17 Mar 2020 03:35:07 GMT

Hey all,

I'm looking to want to do a EPP filter script based on a OID.

So my base OID = .1.3.6.1.2.1.31.1.1.1.10.XX

Where XX > 15000000

Any ideas?

With thanks

Reply to Event Processing Filtering Script on Tue, 11 Jul 2017 08:45:39 GMT

VladimirV — Tue, 11 Jul 2017 08:45:39 GMT

@tursiops said in Event Processing Filtering Script:

Your example should be ok to exclude anything with "DWL" in it.
...
You can always run this against a node via "Execute server script" to confirm that it returns the result you are expecting.

Thx.
Some changes:

if (($node->name) like "*DWL*") {
	return false;
} else {
return true;
}

Reply to Event Processing Filtering Script on Fri, 07 Jul 2017 12:14:17 GMT

Tursiops — Fri, 07 Jul 2017 12:14:17 GMT

Your example should be ok to exclude anything with "DWL" in it.
I have to assume there is a "return true;" somewhere in your script as well? Otherwise the result will be "false" anyway and the exclusion is unnecessary - as the filter will never return true.
For your exclusion, you may also want to make sure that your node name is in fact using capitalised "DWL". If not, maybe use "ilike" instead of "like".

This should be enough to exclude anything with "DWL" (capitalised or not) in it and include everything else:

if ($node->name ilike "*DWL*") return false;
return true;

You can always run this against a node via "Execute server script" to confirm that it returns the result you are expecting.

Reply to Event Processing Filtering Script on Fri, 07 Jul 2017 08:17:44 GMT

VladimirV — Fri, 07 Jul 2017 08:17:44 GMT

Hi there!
Trying exclude nodes containing the name DWL in Event Processing Policy by filtering script:

if (($node->name) like "*DWL*") {
	return false;
}

but event do nothing with predefined action.
Is it correct script?

Reply to Event Processing Filtering Script on Wed, 01 Apr 2015 20:43:24 GMT

hadesfromhell — Wed, 01 Apr 2015 20:43:24 GMT

Hi Alex,

Thank you very much, that solved the problem. I was so focused on the message that I forgot to think out of the box.
Do you know how can I fix the syntax of the expression analyzing the "message" string of the Event ? That will help me in other cases ...
I'm trying to do like says here : https://www.netxms.org/forum/configuration/script-some-generic-questions/msg3186/#msg3186

Thank you very much again !

Reply to Event Processing Filtering Script on Wed, 01 Apr 2015 19:36:18 GMT

alk — Wed, 01 Apr 2015 19:36:18 GMT

Hello.

First of all, you don't have to match message for that. SYS_IF_UP (SYS_IF_DOWN is the same) have 5 parameters, and 3rd one is ip address (check description in event editor).

So you can change script to

if ($3 == "0.0.0.0") {
  return true;
}
return false;

or even (if you don't have any other logic in the script) $3 == "0.0.0.0"

Then opposite script will be

if ($3 != "0.0.0.0") {
  return true;
}
return false;

or $3 != "0.0.0.0"

Problem with your original script was invalid syntax, instead of

if ($event->message !like “0.0.0.0/0.0.0.0”){
  return true; // Match rule
}

if should've been

if (!$event->message like “0.0.0.0/0.0.0.0”){
  return true; // Match rule
}