It would be usefull to have an exclude function in the event processing policy editor "source" field :)
You can select "Negate cell" option - this will mean "everything except listed in this cell". Is it what you mean?
I'll give you an example.
I add "entire network" to the source, but I want to select everything in the network BUT one printer. How would I do this without putting in everything except the printer to the source manually?
Do you understand what I'm trying to say?
For entire network, "negate cell" will help - because entire network includes every node registered in system. So to match everything except one printer, you should add only that printer to source and then select "negate cell".
However, if you wish to match all hosts in specific subnet except some host from this subnet, it will not help. In this case, you will need to use "script" column. For example, to exclude device with ID 100, script may looks like following:
OBJECT_ID != 100
Best regards,
Victor
I see! Thanks for your response as always.