Creating Filters
Last updated on 02 September, 2024Edwin AI has a common filter component to define a query filter consistently across functionality like charts, rules, and actions. When building queries and aggregations to limit results, you have a set of fields to choose from. Available fields vary depending on the input from the selected data source – events, alerts, or insights.
Note: Add Filter on top of Dashboards and Explore page are pre-delivered. This procedure is to create a filter for dashboard charts, rules, or actions.
Procedure
- Under Filter, select Add expression. You can see the pop-up fields to select fields, select a logical operator, and enter a value.
- Select a desired field to be filtered. In the Select field, you will see a list of record types. For more information, see Filter Fields.
- Select an operator such as contains, equals, in, and so on. For more information, see Filter Operators.
- Based on the previous selections, you might enter an appropriate value. For instance, when you select Not empty as an operator, you will not have an option to enter a value. However, when you choose the field as State, and the operator as In, you can enter a list of alert states such as closed, open, and cleared.
- Select Add to add the filter. By default, this filter will be in an And node on top of the filter.
- Select the fork icon to create another filter node, and select the filter icon. You can choose to change the nodes of all filters as And or Or.
- Repeat steps 2 to 5 to add filters as necessary.