Filtering Events

Filtering helps you effectively manage the large number of events that occur throughout your network. You may not want Microsoft Operations Manager 2000 (MOM) to process every event that occurs on every computer. Filtering rules can specify which events MOM neither processes nor stores in the database.

For example, you might not want to know every time a document is deleted from the print queue. Windows records this event in the System event log with an event ID of 13. You could create a filtering rule that ensures MOM does not process or record print queue events with an event ID of 13.

MOM evaluates filtering rules after consolidation rules and before event rules. MOM provides you with the following choices for filtering actions:

Pre-filter

For events matching a pre-filter, MOM stops evaluating further processing rules, and does not save matching events to the database.

Database filter

For events matching a database filter, MOM continues evaluating processing rules, but does not save matching events to the database. You can define responses for database filters.

Conditional filter

For events matching a conditional filter, MOM continues evaluating processing rules, but saves events to the database only if another processing rule match occurs. You can define responses for conditional filters.