Hi Tmadocthomas,
I tested the "exclude" functionality in the lab and it is working as designed, where the two NOTICE level messages are excluded from the filter "important-events." Something you can check is if you have the filter "no-info-debug-events" configured to send events, as that does include severity level NOTICE.
You can view all your enabled filters using:
::*> event notification show
ID Filter Name Destinations
---- ------------------------------ -----------------
1 default-trap-events snmp-traphost
2 important-events snmp-traphost
2 entries were displayed.
Here are my configured event filters:
::*> event filter show
Filter Name Rule Rule Message Name SNMP Trap Type Severity
Position Type
----------- -------- --------- ---------------------- --------------- --------
default-trap-events
1 include * * EMERGENCY, ALERT
2 include callhome.* * ERROR
3 include * Standard, Built-in *
4 exclude * * *
important-events
1 include * * EMERGENCY, ALERT
2 include callhome.* * ERROR
3 exclude * * *
no-info-debug-events
1 include * * EMERGENCY, ALERT, ERROR, NOTICE
2 exclude * * *
test1
1 include * * EMERGENCY, ALERT, ERROR
2 exclude * * *
11 entries were displayed.
You can test a specific event if it will be included or excluded against a specific filter using the following:
::*> event filter test -filter-name default-trap-events -message-name LUN.nvfail.option.on
The message-name "LUN.nvfail.option.on" is excluded from the given filter.
::*> event filter test -filter-name default-trap-events -message-name LUN.space.resv.not.honored
The message-name "LUN.space.resv.not.honored" is excluded from the given filter.
::*> event filter test -filter-name important-events -message-name LUN.nvfail.option.on
The message-name "LUN.nvfail.option.on" is excluded from the given filter.
::*> event filter test -filter-name important-events -message-name LUN.space.resv.not.honored
The message-name "LUN.space.resv.not.honored" is excluded from the given filter.
The same tests for both LUN events provided against filter "no-info-debug-events" and the result is "included":
::*> event filter test -filter-name no-info-debug-events -message-name LUN.nvfail.option.on
The message-name "LUN.nvfail.option.on" is included in the given filter.
::*> event filter test -filter-name no-info-debug-events -message-name LUN.space.resv.not.honored
The message-name "LUN.space.resv.not.honored" is included in the given filter.
Here is a reference document for "event filter test" command:
Event filter test
Regards,
Team NetApp
Team NetApp