Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Flood protection - filters

Is there a way to create a flood protection?

Because we have device sending a lot of messages per hour with the same message again and again.

Is it to possible to have a filter by string or by repetition not to send the message to log file or forward the message but still have at least one copy of the message?

Find more posts tagged with

Accepted answers

All comments

mgebauer

Hello @ldelt, yes, we have such functionality. Please, read thoroughly through the documentation because it is complex topic and we have various filter types to offer.

documentation.solarwinds.com/.../kss_adminguide_filter_messages_based_on_flags_or_counters.htm

ldelt

I've actually read the documentation but I am fuzzy about the logic. You got filters with a rule? ok. So let's say I have a rule to forward to another system, a rule to send to file, a rule to send a DB. Let's take a simple example, I have a message containing the string "Hello world" how to do a NOT? I would like not to forward to another system but I still want to send to file. If I create a filter with action drop message, what happens?

mgebauer

Each event will process all rules unless you use "stop processing".

if you would same behaviour across all 3 actions, you would create one rule with 3 actions. In case you want forwarding to happen only once, but other two actions happening for every message, you would need 3 separate rules. Each rule will have one action and one rule with forwarding action would need the Flags/Counters filter.

ldelt

I see. Order of operation matters. The documentation doesn't show that as many SolarWinds documentation we've got the partition not the music.