Query Events
    ------------

    You can use this function to search for and view both alarm and
    normal logged messages from Events. The Query Event Messages window
    will appear, as shown below.


    Fields

    This window contains the following fields:

    Query Hosts

    Use these toggles to specify which hosts to query for reports. The
    options are:

    + Hosts In Exception Pool (the default)
    + Hosts In Current Pool
    + Specific Host(s)

    If you choose the Specific Host(s) option, use the text field to the
    right of that option to specify which host(s) to check for messages.
    Leave a blank space between host names for multiple entries. You can
    also click on the arrow button to the right to pop up a pick list of
    all hosts within the current pool and make your selection(s) from
    there.

    Message Type

    Use these toggles to specify which type of messages to search for in
    the reports. The options are:

    + Event Messages Only
    + Log Messages Only
    + Both Messages (the default)

    Event Messages are Events alarm messages generated by a test
    crossing a user-defined threshold. Log Messages are those Events
    informational messages generated when a test runs without generating
    an event and that (successful) result is logged.

    Message Severity Level

    You can use these toggles to choose what severity level of the
    messages to use in the search. The options are:

    + Severe Message
    + Info Message
    + Error Message
    + Okay Message
    + Warning Message

    You can select more than one severity level to use in the search;
    you must select at least one severity level. The default is all
    levels of message severity will be queried during the search.

    Test Name Filter

    You can use this field to limit the search to specific test names.
    You may type in the entire test name or just the first few letters
    of the test name. All tests whose name contains part or all of the
    specified string will be queried. Leave a blank space between test
    names for multiple entries. You can also click on the arrow button
    to the right to pop up a pick list of all pre-defined standard
    Events tests and make your selection(s) from there.

    You can also use the standard UNIX wild cards `*', `[]', and `?' in
    this field (e.g., /home/*).

    Number of Messages per Host

    Events logs can become large very quickly and therefore take more
    time to search. You can use this field to help speed up the search
    time and only view the most recent X messages per host. You can also
    use the counter buttons to the right to increment or decrement the
    number displayed. The most recent message is always displayed first.

    Timestamp between ... and

    You can use these two fields to limit the search to messages logged
    between the specified times. See "TIME FORMATS" on page C-1 for
    details on specifying this time-date value.

    Buttons

    This window contains the following button:

    Execute Query

    Once you've made your selections, click on this button to begin the
    search process. When the query is completed, the results will be
    displayed in the event viewer window.