Skip to main content

existingAlertFilter

A Workflow Engine function that returns true if the existing alert for a deduplicating event matches a SQL-like filter. Uses the evaluateFilter method in the CEvents API.

This function is available as a feature of the Workflow Engine v1.0 and later.

This function is available for event workflows only.

Back to Workflow Engine Functions Reference.

Arguments

Workflow Engine function existingAlertFilter takes the following arguments:

Name

Required

Type

Description

filter

Yes

String

SQL-like filter expression. Use single quotes around strings. For example: description matches 'abc'.

Example

The following example demonstrates typical use of Workflow Engine function existingAlertFilter. If you want to verify if a deduplicating event has an agent_location value of "London", set the following:

  • filter: agent_location = 'London'

The UI translates your settings to the following JSON:

agent_location = 'London'

Given an alert with the following signature:

"APPSERVER2002:APPLICATION:AVAILABILITY"

An event with the following fields returns true:

"signature": "APPSERVER2002:APPLICATION:AVAILABILITY",
"agent_location": "London"

An event with the following fields returns false:

"signature": "APPSERVER2002:APPLICATION:AVAILABILITY",
"agent_location": "SF"
In this section: