Conditions and Filters - Response Action Conditions

A condition can be applied to an individual response action. The condition takes the form of an expression, which typically evaluates the specific variables made available. If the result of the expression for a particular action is True, the action is processed.

Example Conditions

The following condition, used with a response action that is part of a response to an unfiltered event log entry, will only process the action if the event identifier is 1000.

ID = 1000

The following condition, used with a response action that is part of a response to the service monitoring, will only process the action one of the Microsoft Exchange services has failed.

left(Source, 6) = "MSExch"