Global Filters

Global filters are classified as Public filters. Global filters are sequentially processed at the Collector Manager for each event. Once the global filter criteria are met, the evaluation stops for that event and the associated global filter action is taken for the event.

The order of evaluation of global filters is top to bottom, as shown in the console. They can be enabled or disabled as required. Global Filters enable routing actions and JavaScript actions on events. Routing actions include dropping events or routing events to database, database and GUI (SCC), or only to GUI (SCC).

Through the Global Configuration window, you can:

Figure 4 Global Filter Configuration

NOTE:The Action column and the Action Manager button are available only on systems that have Sentinel 6.1 RD Hotfix 2 or later installed.

For trademark and copyright information, see Legal Notices.