QHST Filters - ironstream_for_elastic - ironstream_for_kafka - ironstream_for_splunk - 7.4

1. Start the Message Queue Filters application from the Configuration Tool by clicking the QHST Filters tab.

Figure 7: QHST Filters

2. To change the list of message IDs that are sent to the Ironstream Proxy Server, add a new filter group using the Create button or edit an existing one using the Edit button. New filters may also be created by copying an existing filter using the Copy button. You can also Rename or Delete an existing group.

3. In the Assigned systems box, select one or more systems that this message filter will be distributed to.

4. Click the Add Filter button and enter the new message IDs to the list in the new field. To delete a message ID from the list, click the message’s Delete button.

5. Note: Wildcards are not supported for QHST, you must fill in a 7-character message ID into each filter field you add.

6. Click the Save button to update the configuration.

7. Select a filter group name and click the Distribute button to send the list of message IDs to the system. The EVSBS subsystem must be running at the time of the distribution.