{% extends "alertprofiles/base_detail.html" %} {% block url_edit %}{% url alertprofiles-filter_groups-save %}{% endblock %} {% block url_remove_expression %}{% url alertprofiles-filter_groups-removefilter %}{% endblock %} {% block url_add_expression %}{% url alertprofiles-filter_groups-addfilter %}{% endblock %} {% block headercontent %} {% if detail_id %} Filter group details {% else %} New filter group {% endif %} {% endblock %} {% block expressions_caption_content %} Filters {% endblock %} {% block expressions_thead_cols %} {% if owner %}
The four operators are in the database represented by to flags, one for «include» and one for «positive». The table below shows how these operators affect the filters added.
Notice that priority affects how the final set will be, as each filter is checked according to it's priority, ie: number 1 first, then number two and so on.
Operator | Include flag | Positive flag | Description |
---|---|---|---|
Add | 1 | 1 | Union in set theory. Adds all matching alerts to the set. |
Subtract | 0 | 1 | Exclusion. Removes all matching alerts from the set. |
And | 0 | 0 | Intersection in set theory. Removes all alerts but those who are in both the current set and those in the set matched by this filter. |
Add inverse | 1 | 0 | Complement of set. Adds the oposite of whats matched. Ie: with a filter that checks for severity > 70, using this operator will check for severity <= 70. |