Extreme Networks ExtremeWare - Configure Log Filter Events

620 ExtremeWare Software 7.3.0 Command Reference Guide
Commands for Status Monitoring and Statistics
configure log filter events
configure log filter <filter name> [add | delete] {exclude} events [<event
condition> | [all | <event component>] {severity <severity> {only}}]
Description
Configures a log filter by adding or deleting a specified set of events.
Syntax Description
Default
If the exclude keyword is not used, the events will be included by the filter. If severity is not
specified, then the filter will use the component default severity threshold (see the note on
on page 621
when delete or exclude is specified).
Usage Guidelines
This command controls the incidents that pass a filter by adding, or deleting, a specified set of events. If
you want to configure a filter to include or exclude incidents based on event parameter values (for
example, MAC address or BGP Neighbor) see the command
configure log filter events match
on page 623.
When the add keyword is used, the specified event name, or set of events described by component and
severity value, is added to the beginning of the filter item list maintained for this filter. The new filter
item either includes the events specified, or if the
exclude keyword is present, excludes the events
specified.
The delete keyword is used to remove events from the filter item list that were previously added using
the add command. All filter items currently in the filter item list that are identical to, or a subset of, the
set of events specified in the delete command will be removed.
Event Filtering Process. From a logical standpoint, the filter associated with each enabled log target
is examined to determine whether a message should be logged to that particular target. The
determination is made for a given filter by comparing the incident with the most recently configured
filter item first. If the incident matches this filter item, the incident is either included or excluded,
depending on whether the
exclude keyword was used. Subsequent filter items on the list are compared
if necessary. If the list of filter items has been exhausted with no match, the incident is excluded.
filter name Specifies the filter to configure.
add Add the specified events to the filter
delete Remove the specified events from the filter
exclude Events matching the specified events will be excluded
event condition Specifies an individual event.
all Specifies all components and subcomponents.
event component Specifies all the events associated with a particular component.
severity Specifies the minimum severity level of events (if the keyword only is omitted).
only Specifies only events of the specified severity level.