How can I delete events from my cell with the mquery command ?

mquery can be used with -s DELETE option to delete events/data from your impact manager.

(Replace CELLNAME with the name of your cell)

For example if you want to delete all CLOSED PATROL_EV type events from your cell with the msg slot = test you can run the following:

[Here Patrol_EV = the required CLASS] In gen, you can use any class using the -a switch.

mquery -n CELLNAME -a PATROL_EV -w 'status: == CLOSED, msg: == test ' -s DELETE

To delete all events from your cell for a specific date range(18th Sep 06 -> 20th Sep 06) you could use:

mquery -n CELLNAME -a EVENT -s DELETE -w "date: between ['20060918', '20060920']"

You can specify any slots and values to narrow down your criteria.. e.g.

mquery -n CELLNAME -a PATROL_EV -s DELETE -w "status: == CLOSED, severity: == OK, 

mc_origin: == testcell, mc_host: =='losborn.bmc.com', event_handle: == 7086"

If you want to delete entries from a dynamic data table you would have to use the -d option additionally

mquery -n CELLNAME -a BEM_MATCH_TABLE -d -s DELETE

This would delete all the data from the table BEM_MATCH_TABLE.

As the mquery should not be used for amounts of more than 1000 entries/events you should use the -i.e. startup option of mcell to delete ALL events from your cell.

To check the amount of events/entries that will be deleted simply replace the DELETE by COUNT in your mquery:

mquery -n CELLNAME -w 'status: == CLOSED, msg: == test ' -s COUNT

 

General Command:

mquery -n YourCellName -a EventClass -w "event_handle: ==<Internal ID>" -s DELETE

Example:

mquery -n pncell_SDCZFMSWVPBMC03 -a CORE_EVENT -w "event_handle: == 131253" -s DELETE

For more info on the mquery binary, type a mquery -h from the command prompt. This will show you all available slots/class options that you can use with mquery