Dashboard Event List does not filter based on view limitation

Hi Everyone.

Creating a dashboard with view limitation defined for a single server (large Linux application server).

Solarwinds version 2023.x using a Classic dashboard. I would like to use the standard out-of-the-box resources where possible.

Adding resources for CPU, memory, disk - the view filter applies. I only see values for the one server.

However... any kind of 'Event...' based resource does not seem to obey the view limitation. No matter which resource chosen I see events for all devices in the system, not just the one server.

I suppose could build a SWQL query to pull events from just one server, but I would rather use a built in resource.

Does anyone know why the built-in Event resources do not filter based on console view limitations?

Thanks.

Find more posts tagged with

Dashboard view limitation

Events

Accepted answers

bobmarley

I am not sure. My out of the box ones do not filter to a specific node but have not loaded and tried all of them.

Here is the SWQL if you need to use a Custom Query, edit it to your needs.

SELECT TOP 20
TOLOCAL(EventTime) AS LocalEventTime, Message, EventType, NetworkNode, NetObjectID
FROM Orion.Events
Where Message LIKE '%YourServerName%'
Order by EventTime DESC

mesverrum

A lot of events in the deep guts of Orion don't get associated with specific entities, so they arent subject to account/view limitations. Or if you set a limitation on specific entities like a node then that doesnt really carry through into related vman or srm entities. It has been a real challenge in the past when I worked on multi tenant setups where we had to do a lot of pruning to make it so users couldnt see data leaked across other tenants.

All comments

bobmarley

I am not sure. My out of the box ones do not filter to a specific node but have not loaded and tried all of them.

Here is the SWQL if you need to use a Custom Query, edit it to your needs.

SELECT TOP 20
TOLOCAL(EventTime) AS LocalEventTime, Message, EventType, NetworkNode, NetObjectID
FROM Orion.Events
Where Message LIKE '%YourServerName%'
Order by EventTime DESC

mesverrum

robert777

Thank you! I was able to solve the problem with a query similar to that provided by bobmarley.

Agree that the view limitations feature is pretty hit-and-miss in terms of what resources it will actually filter.

Cheers.