Skip to main content

Filters

Azure-side filter

Azure API filter is sent directly to the API and reduces the number of events returned by Azure. The official documentation shows expressions based on service and region, for example:

service eq 'Virtual Machines' or region eq 'West US'

The plugin does not validate or modify this expression. Syntax that Azure does not accept causes the corresponding subscription request to return an error.

Local event filters

All remaining filters are evaluated locally after the events have been downloaded. Each textarea accepts one regular expression per line:

^West Europe$
^Spain Central$

Matching is case-insensitive. Empty lines and lines beginning with # are ignored.

Allow filters behave as follows:

  • When empty, every value is accepted.
  • When expressions are configured, at least one must match.

Event search allow regexp searches the subscription, tracking ID, title, summary, status, level, type, subtype, service and region fields. Event search deny regexp searches the same fields and takes precedence when excluding an event.

Module filters

Modules allow regexp and Modules deny regexp are applied to the final module name after prefixes and, in single-agent mode, the region name have been added.

If a module matches both allow and deny filters, deny takes precedence.

Example that keeps connection and counter modules only:

Connection$|events count$
Back to top