04-26-2023 06:58 AM
How do I filter ISE alarms to NOT include this type of alarm? I still want to see when config changes, just not configuration added by internal-feed-user for OUI. I see the filter in the alarm settings but not sure what to put in the filter.
Alarm Name :
Configuration Changed
Details :
Configuration Added: Admin=internal-feed-user; Object Type=OUI; Object Name=98:39:C0
04-26-2023 08:02 AM
Filter parameters in the alarm setting is to define the data to be evaluated. The Object Type, Object Name and Admin Name fields are displayed for Configuration Change alarms. You can add multiple instances of same alarm with different criteria.
These parameters you can find in the alarm above. So if you define these parameters: Admin=internal-feed-user; Object Type=OUI; Object Name=98:39:C0, then only alarm will only generate when this criteria will be met. So exactly you cannot filter a specific alarm.
09-07-2023 10:08 AM
I'm having the same issue as well; it would be nice if the alarm filter settings accepted regex statements or attributes like not equals or !. Were you able to find a solution?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide