Include and Exclude Scopes

You can define an Event Monitor scope by adding container and group objects to the Include and Exclude lists. By default there are no entries in either list so each domain and all of its objects are implicitly included where you have installed and configured an Event Monitor.

The following rules govern the behavior of items in the lists:

  • Adding a container to a list affects all descendents of that container's subtree, not just immediate child objects.
  • If the scope is defined only by container Includes, the remainder of the AD domain is implicitly excluded.
  • If the scope is defined only by container Excludes, the remainder of the AD domain is implicitly included.
  • You can only add groups to the Exclude list.
  • Rules only apply within the context of a single domain. You may need to add additional rules for other domains to achieve the desired scope.

NOTE: You can override entries in the Include list by specifying subordinate items in the Exclude list, but the Event Scope does not support the opposite. You cannot override entries in the Exclude list.

Include

The Include list provides a means for creating a whitelist for the specified objects. Anything not contained within the Include list is implicitly excluded.

Containers

Add containers to the Include list to limit the scope to those containers and their subordinate objects.

Exclude

The Exclude list provides a means for creating a blacklist for specified objects. Anything not contained within the Exclude list is implicitly included.

Containers

Add containers to the Exclude list to prevent event reporting for those containers and their subordinate objects.

Groups

Add groups to the Exclude list to prevent event reporting for those groups.

NOTE: Setting the Event Scope to exclude either a group or its members will prevent monitoring of that groups membership. The same applies to group managers.