Events Filters

You can apply filters to events in all interfaces:

Events use these filter categories:

Core

Filters on the primary attributes of events: status, source, priority, and host.

status: Filters on the status of the event: info, warning, or error.

source: Filters on the source of the event, such as aws, kubernetes, container, or System.

priority

host

Search for an event by selecting a known host from the drop-down, or using the host or a portion of that host in the search bar.

When selecting the same value from the drop-down, you toggle between these options:

All option shows all events that match other criteria.
Only option shows only the events that match other criteria AND the selected value.

Labels

Filters based on the observed system type, such as Cloud, kubernetes, and Additional.

Cloud: Filters on various attributes of cloud-based services.

Includes availability zone, host, instance id, instance type, project, and kube cluster name.

Kubernetes: Filters on the attributes of events that originated in Kubernetes services.

Includes kube cluster name, kube container name, kube namespace, kube service, and pod name.

Additional: Filters based on custom labels and tags.

Event

You can filter the events by their individual attributes:

id

Search for an event by selecting a known id from the drop-down, or using the id or a portion of that id in the search bar.

When selecting the same value from the drop-down, you toggle between these options:

All option shows all events that match other criteria.
Only option shows only the events that match other criteria AND the selected value.

event type

Search for an event by selecting a known event type from the drop-down, or using the event type or a portion of that event type in the search bar.

When selecting the same value from the drop-down, you toggle between these options:

All option shows all events that match other criteria.
Only option shows only the events that match other criteria AND the selected value.

aggregation key

Search for an event by selecting a known aggregation key from the drop-down, or using the aggregation key or a portion of that aggregation key in the search bar.

When selecting the same value from the drop-down, you toggle between these options:

All option shows all events that match other criteria.
Only option shows only the events that match other criteria AND the selected value.

message

Search for an event by selecting a known message from the drop-down, or using the message or a portion of that message in the search bar.

When selecting the same value from the drop-down, you toggle between these options:

All option shows all events that match other criteria.
Only option shows only the events that match other criteria AND the selected value.