How to I filter the results to either exclude specific server names or server names beginning with a certain string ? It appears the alert has to be configured and the scope search query amended. Currently it's as below.
vm.snap.dateCreated:[* TO now-30days]
I've tried all sorted of syntax without success
i.e “vm.name:Servername*” AND vm.snap.dateCreated:[* TO now-30days]
If I save the amendment and run Evaluate now I get the same or no results at all.
Is a better Search query reference available than the one linked from Help ?
Hi, correct format of the search formula is:
vm.name:"Servername*" AND vm.snap.dateCreated:[* TO now-30days]
If you want to exclude set of VMs then you can use:
vm.snap.dateCreated:[* TO now-30days] AND NOT vm.name:"Servername*"
or shorter format:
vm.snap.dateCreated:[* TO now-30days] -vm.name:"Servername*"
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process. Learn more today by joining now.