My environment is that an issue is triggered and recovered periodically.
So I would like to query only current problem event (does not have recovered event ID).
Here is a query string that I am using.
{'limit' : 100, 'severities' : [2, 3, 4, 5], 'selectHosts' : ['name'], 'value' : 1, 'suppressed' : 0, 'acknowledged' : 0, 'time_from': target_timestamp, 'r_eventid': '0'}
'suppressed', 'acknowledged' options are working very well.
However the only 'r_eventid' is not effective.
I tried 'filter' option like this. {'filter' : {'r_eventid' : '0'}}
However this does not work too.
Any idea ?
So I would like to query only current problem event (does not have recovered event ID).
Here is a query string that I am using.
{'limit' : 100, 'severities' : [2, 3, 4, 5], 'selectHosts' : ['name'], 'value' : 1, 'suppressed' : 0, 'acknowledged' : 0, 'time_from': target_timestamp, 'r_eventid': '0'}
'suppressed', 'acknowledged' options are working very well.
However the only 'r_eventid' is not effective.
I tried 'filter' option like this. {'filter' : {'r_eventid' : '0'}}
However this does not work too.
Any idea ?