253
occurs times period period: Executes the policy if the number of log matches over an interval
exceeds the limit. The times argument specifies the maximum number of log matches in the range of
1 to 32. The period argument specifies an interval in the range of 1 to 4294967295 seconds.
Usage guidelines
Use Syslog event monitor policies to monitor log messages.
EAA executes a Syslog event monitor policy when the number of matching logs over an interval
reaches the limit.
NOTE:
EAA does not count log messages generated by the RTM module when it counts log matches.
You can configure only one event for a monitor policy. If the monitor policy already contains an event,
the new event replaces the old event.
Examples
# Configure a CLI-defined policy to monitor Syslog messages for level 3 to level 0 messages that
contain the down string. Enable the policy to execute when five log matches are found within 6
seconds.
<Sysname> system-view
[Sysname] rtm cli-policy test
[Sysname-rtm-test] event syslog priority 3 msg down occurs 5 period 6
event track
Use event track to configure a track event for a CLI-defined monitor policy.
Use undo event to delete the event in a CLI-defined monitor policy.
Syntax
event track track-list state { negative | positive } [ suppress-time suppress-time ]
undo event
Default
A CLI-defined policy does not contain a track event.
Views
CLI-defined policy view
Predefined user roles
network-admin
Parameters
track-list: Specifies a space-separated list of up to 16 track items. Each item specifies a track entry
number or a range of track entry numbers in the form of track-entry-number to track-entry-number.
The value range for the track-entry-number argument is 1 to 1024.
state { negative | positive }: Monitors state change of the track entries.
• negative: Triggers the policy when the states of the track entries change from Positive to
Negative.
• positive: Triggers the policy when the states of the track entries change from Negative to
Positive.
suppress-time suppress-time: Sets a suppress time in the range of 1 to 4294967295, in seconds.
The default value is 0.
To Next Page
Loading...
Need help?
General