TEC Task Library - Find_Similar_Events

Queries the event repository using an event for comparing attributes. Shows event details in the output of the task's results.

Perform the following steps to configure the task:

  1. Select Find_Similar_Events from the TEC Tasks list in the Task Execution dialog box. The configuration options for the task are displayed in the right pane.
  2. In the right pane, navigate through the radio buttons by clicking Yes or No to filter your matching criteria. Yes means to use the attribute and No means not to use the attribute for comparisons.
    Match Class
    The event class.
    Match Status
    The status of the event.
    Match Severity
    The severity of the event.
    Match Hostname
    The name of the system on which the event occurred.
    Match Source
    The source of the events.
    Match SubSource
    A further categorization of the source.
    Match Origin
    The protocol address or host name of the source system.
    Match SubOrigin
    A further categorization of the origin.
    Match Message
    The message text of the event.
  3. You can optionally enter a starting date and time in the Starting Date and Time text box. A starting date and time specifies to query events received from this point to the present. To enter a starting point, use the following format:
    mon dd hh:mm:ss yyyy

    For example, Jan 01 00:01:01 2001.

    To query all events, enter the asterisk (*) wildcard character.

  4. Click the Ascending or Descending radio button to specify the sort order of output results. Ascending lists the oldest event first. Descending lists the most recent event first.
  5. By default, all base event attributes are displayed in the output from the task. (Indicated by the * wildcard character in the read-only text box adjacent to the Attributes button.) To specify a particular set of base event attributes to show in the output, press the Attributes button. Select the appropriate attributes; then, press the OK button. The selected attributes are displayed in the read-only text box adjacent to the Attributes button.

Assumptions and Prerequisites

Authorization Required

RIM_view, super, senior, admin, user

Command-Line (CLI) Execution

This task cannot be executed from the command line.

See Also