Easier "exclude" filters
I like that you start your various filters off with "include" for things like alert queries and dashboard queries, but I'd also like to see an "exclude" that follows the include. There are plenty ...
Forum Discussion
On 4/15/2016 at 10:08 AM, Sarah Terry said:Hi Eric - thanks for the feedback! For your examples:
1. Windows Servers/!(IIS*) would include everything in the Windows Server subgroups , except for the IIS subgroup & all subgroups under IIS
2. Cisco/ESA* would include devices in the ESA group and all subgroups
You can combine these into one expression using the | character, like this: (Windows Servers/!(IIS*))|(Cisco/ESA*)
Let me know if this doesn't work for you
Sorry, but that syntax isn't working for me. And maybe its due to my group structure being more complex.
LocalLocation\Windows\Domains\DomainNAME\Exchange
LocalLocation\Windows\Domains\DomainNAME\IIS
DRLocation\Windows\Domains\DomainNAME\Exchange
DRLocation\Windows\Domains\DomainNAME\IIS
Is a more realistic example. I of course modified your query a beginning wildcard to account for the parent group, as in I did (*Windows*!(*IIS*)). I don't see anything wrong with my query, but it returns back devices that are in the "IIS" group as well as other devices that I want.
I still contend that "(Like *Windows* and not like *IIS*) or (like *EAS*)" would be far easier to read and write.
