The Color Filter Configuration allows you to assign background and text colors to events in the Sentinel Control Center based on filter criteria. The background and text colors assigned to a filter apply to all Sentinel tables, including active views, event tables associated with Incidents, offline queries and historical event queries.
On applying a color filter, all the event tables will be updated.
The Color Filter GUI displays a listing of all the color filters that are defined in the order in which they should be applied. If an event meets the criteria for more than one of the color filters, the topmost color filter configuration will be applied. For example, the following filter configurations are created and attached to color filter configuration:
Color filter configuration 1: sev=2 (with background color red and text color yellow)
Color filter configuration 2: sev>1 (with background color white and text color black)
Any event with severity=2 will meet the criteria for both color filters, but since the sev=2 color filter configuration is at the top, all the events with sev=2 will be coded as per color filter configuration 1. All the other events with sev>1 (for e.g., sev=3, 4, 5 and so on) will follow color filter configuration 2.