293
7. A lower number represents higher priority level. For example, specify a severity level of 3 to match
log messages from level 3 to level 0.
msg msg: Specifies a regular expression to match the message body, a string of 1 to 255 characters.
The log message must use the Hewlett Packard Enterprise format. For more information about log
message formats, see "Configuring the information center."
occurs times period period: Executes the policy if the number of log matches over an interval
exceeds the limit. The times argument specifies the maximum number of log matches in the range of
1 to 32. The period argument specifies an interval in the range of 1 to 4294967295 seconds.
Usage guidelines
Use Syslog event monitor policies to monitor log messages.
EAA executes a Syslog event monitor policy when the number of matching logs over an interval
reaches the limit.
NOTE:
EAA does not count log messages generated by the RTM module when it counts log matches.
You can configure only one event for a monitor policy. If the monitor policy already contains an event,
the new event replaces the old event.
Examples
# Configure a CLI-defined policy to monitor Syslog messages for level 3 to level 0 messages that
contain the down string. Enable the policy to execute when five log matches are found within 6
seconds.
<Sysname> system-view
[Sysname] rtm cli-policy test
[Sysname-rtm-test] event syslog priority 3 msg down occurs 5 period 6
rtm cli-policy
Use rtm cli-policy to create a CLI-defined EAA monitor policy and enter its view, or enter the view of
an existing CLI-defined EAA monitor policy.
Use undo rtm cli-policy to delete a CLI-defined monitor policy.
Syntax
rtm cli-policy policy-name
undo rtm cli-policy policy-name
Default
No CLI-defined monitor policies exist.
Views
System view
Predefined user roles
network-admin
Parameters
policy-name: Specifies the name of a CLI-defined monitor policy, a case-sensitive string of 1 to 63
characters.
To Next Page
Loading...
Need help?
General
