Filters—Group By

This page uses adding filters to an AI Engine Rule as an example. The names of windows and setting options vary slightly depending on where you are creating or modifying a filter.

The Group By tab appears on all Observed and Not Observed Compound AI Engine Rule blocks.

Any log message that does not include a value in every Group By field you select will be ignored by the rule. For example, if you Group By the Country (Origin) field, and a log has no value for Country (Origin), that log is not evaluated by the rule.

When the tab is present, you must select at least one Group By Field with these limitations:

• You can select only one of the following: Location (Origin), Region (Origin), or Country (Origin).
• You can select only one of the following: Location (Impacted), Region (Impacted), or Country (Impacted).
• You may not remove a selection that is used in a relationship with another rule block.

Fields marked with an asterisk (*) are not written to the AIE Event, so they are unavailable for SmartResponse or Event Queries. These fields are available for AIE Drill Down.