Adding filters

Scrutinizer offers an extremly powerful filtering engine which can also be leveraged by the datasource. The easiest way to pass filters to the datasource is to first build them within Scrutinizer to get a feel for the format.

For example, to see what JSON would be needed to pass a filter for host 10.60.1.240 and application TCP 443, build the filters in Scrutinizer and then look at the Report JSON (API).

../../_images/addFilters.png

Then copy from the opening bracket to the closing bracket and paste the filter within Grafana. Next select Apply Filter.

../../_images/addfiltersGrafana.png

Keep in mind the “sdfDips_0” will be igored. This references the device in Scrutinizer you were looking at when you built the filters. You can leave it in if it’s easier to paste that way, or you can remove it. Both will yield same results.

../../_images/addfiltersnoDevice.png