Create Alarm Query Filter (G Dataflow)

Use the properties in the cluster to specify the values you want to match on the server. The G Type contains multiple properties. Refer to the following table to learn about the properties you can use to filter alarm instances from the server.

Property	Description	Example
alarm id	Unique identifier for a process or condition tracked by an alarm.	System.Health.DiskSpaceLow.Bdd9u!4aMd!$pYrf*CnaIZ2tbu$-Ct%?
acknowledged after	Timestamp representing the earliest time to return alarm instances for. The server returns alarm instances your team acknowledged between acknowledged after and acknowledged before.	2019-01-14T23:15:53.7270539Z
acknowledged before	Timestamp representing the latest time to return alarm instances for. The server returns alarm instances your team acknowledged between acknowledged after and acknowledged before.	2019-01-15T23:15:53.7270539Z
channel	Resource associated with the alarm. For example, if an application sets an alarm because a wireless network went down, the channel could be the name of the network and the resource type classifies the alarm as the network.	CRIO1.System.Health.DiskSpaceUsePercentage
created by	Identifier for who or what created a given alarm instance. This property normally identifies the rule engine that requested an alarm instance be created.	TagRuleEngine
current severity level max	Highest current severity level you want to return alarm instances for. The server returns alarm instances with current severity levels between current severity level min and current severity level max.	3
current severity level min	Lowest current severity level you want to return alarm instances for. The server returns alarm instances with current severity levels between current severity level min and current severity level max.	2
description	Notes you gave an alarm instance.	Disk space on tester-1 is high. Disk usage was 95% when this alarm was created.
display name	Title you gave the alarm instance.	Low disk space on tester-1
highest severity level max	Highest severity level an instance ever reached. The server returns alarm instances with severity levels between highest severity level min and highest severity level max.	4
highest severity level min	Highest severity level an alarm instance ever reached. The server returns alarm instances with severity levels between highest severity level min and highest severity level max.	2
is acknowledged	Enum that determines whether to return acknowledged, unacknowledged, or all alarm instances.	Any
is active	Enum that determines whether to return active, inactive, or all alarm instances.	False
is clear	Enum that determines whether to return cleared, active, or all alarm instances.	True
occurred after	Timestamp specifying when an alarm instance occurred. The server returns alarm instances with timestamps between occurred after and occurred before.	2019-01-14T23:15:53.7270539Z
occurred before	Timestamp specifying when an alarm instance occurred. The server returns alarm instances with timestamps between occurred after and occurred before.	2019-01-15T23:15:53.7270539Z
keywords	Words or phrases associated with an alarm instance.	keyword1
properties	Key-value pairs associated with an alarm instance.	Slot Number = -1
resource type	Type of resource associated with the alarm. For example, if an application sets an alarm because a wireless network went down, the channel may be the name of the network where the alarm triggered and the resource type may classify the alarm as the network.	Network