Open for Voting

Kiwi Syslog - Objects group for filters

Hello!

It may be usefully to have a possibility to create an "objects group" with defined fields in filters.

For example:

Now I'm trying to create separate notifications for some group of devices. I'm filtering them by IP.

When a new devices is added I should update all rules where such filters are used.

With "objects group" it will be possible to modify only one objects group and all rules will use same data.

Now:

Filters --> Add filter --> IP address --> Simple

"192.168.1.1" "192.168.1.2" "192.168.1.3" "192.168.1.4" "192.168.1.5" "192.168.1.6"

With objects group:

Filters --> Add filter --> IP address --> Objects group --> Servers

Value Comment

192.168.1.1 DB-1

192.168.1.2 DB-2

192.168.1.3 WWW-1

192.168.1.4 WWW-2

192.168.1.5 Proj-1

192.168.1.6 Proj-2

It also may support ranges:

Value Comment

192.168.1.1-20 Web servers

Or regexp:

Value Comment

Alert from host db-.* DB servers

This can be used for IP address, Hostname, Mesage text and maybe somewhere else.

This request may solve and requests.

Thank you!