Can someone explain to me why this does not work
but this does
In the first capture the alert will be triggered when IAROCDB1 fixed disk used > 80% and “Caption” does not contain “%/usr/software%” AND “%/home/%”
In the second capture the alert will be triggered when IAROCDB1 fixed disk used > 80% and “Caption” does not contain “%/usr/software%” OR “%/home/%”
The volume caption cannot be %/usr/software% and %/home/% at the same time. It can be either %/usr/software% or %/home/%
I hope this helps.
as a tip: if you change the rule to be a custom SQL alert you get the syntax being used, which often exposes the translation...
it would also be nice if there was a 'does not contain' choice which would make the rules somewhat shorter..
I agree it would have been nice to have "does not contain" choice.
What I was trying to accomplish was any fixed disk that is not /usr/software OR /home/% would create an alert.
In the first one, the home directories were still alerting.
In the second one both are suppressed.
, I agree about the does not contain.
I think it should look like this
Would that cover anything that began with /home/. ie /home/user5, /home/user6 etc?
hmm. I do not think so. It will cover the exact caption. Let me see what else can be done.
Changing it to the Advanced SQL query really made it make sense. Thanks
ok.
on the second subgroup change "any" to "not all". The conditions in that group should say "starts with" ....
