Skip to main content

Filter action

Available for event and incident workflows

This action filters events or incidents that pass through a previous action. Based on whether the events or incidents match the given filter, you can then decide whether to proceed to the next action or skip to the next workflow.

This action takes the following inputs:

  • Filter

    Click in the Filter field and select the fields, values, and operators from the pull-down menus.

  • Exit Option

    If the event or incident does not match the filter, either skip to the next workflow or stop all workflows.

    For an event, stopping all workflows will drop the event. For an incident, stopping all workflows prevents further workflows from processing the incident during the current cycle. However, the incident can still be processed again at a later time if it is re-triggered.

Event example

In this example, an event workflow uses a Filter action to check if the event belongs to the "Compute" class field. If the event does not belong to the "Compute" class, then the workflow drops the event:

  • Filter: class = "Compute"

  • Exit Option: Drop the event

Incident example

In this example, an incident workflow uses a Filter action to check if the incident is in maintenance. If the incident is in maintenance, then the workflow skips to the next workflow:

  • Filter: "in maintenance" != true

  • Exit Option: Skip to the next workflow

In this section: