cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 8

VMs with Old Snapshots - How do I filter results.

How to I filter the results to either exclude specific server names or server names beginning with a certain string ? It appears the alert has to be configured and the scope search query amended. Currently it's as below.

vm.snap.dateCreated:[* TO now-30days]

I've tried all sorted of syntax without success

i.e  “vm.name:Servername*” AND vm.snap.dateCreated:[* TO now-30days]

If I save the amendment and run Evaluate now I get the same or no results at all.

Is a better Search query reference available than the one linked from Help ?

0 Kudos
3 Replies
Level 11

Are you looking to run a report for this information, or are you looking to edit a panel to list only certain systems with snapshots? 

0 Kudos
Level 8

I'm looking to edit a panel to list only certain systems with snapshots. i.e. exclude certain VM's or VM name wildcards.

0 Kudos
Level 12

Hi, correct format of the search formula is:

vm.name:"Servername*" AND vm.snap.dateCreated:[* TO now-30days]

If you want to exclude set of VMs then you can use:

vm.snap.dateCreated:[* TO now-30days] AND NOT vm.name:"Servername*"

or shorter format:

vm.snap.dateCreated:[* TO now-30days] -vm.name:"Servername*"