Configuration Guide SEM Configuration
Configure event
Enter privileged EXEC mode
Ruijie# configure terminal
Enter global configuration mode
Ruijie(config)# smart manager applet
applet-name [class class-options]
Enter SEM configuration mode.
applet-name is the specified policy name.
class parameter specifies the policy class.
Ruijie(SEM-applet)# event tag
event-name [correlate {andnot | and |
or}] syslog pattern regular-expression
[priority priority-level] [occurs
num-occurrences] [period period-value]
[skip {yes|no}]
The detection of every event corresponds
to an event command. Here we take Syslog
event as an example and introduce the
steps to configure an event. Please refer to
"SEM Command Reference" for information
about other commands.
To delete the policy, execute "no event tag event-name" command in the SEM
configuration mode.
Configuration example:
# Configure a syslog event named "event_a" for a policy named "policy_a" to detect logs
containing "shutdown" content.
Ruijie# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Ruijie(config)# smart manager applet policy_a
Ruijie(SEM-applet)# event tag event_a syslog pattern "shutdown"
If policy configurations are submitted without configuring event, the policy
will not be registered and remain in editing state
You can configure multiple events for one policy. These events will be
sequenced according to the tag parameter of policy.
Enter privileged EXEC mode
Ruijie# configure terminal
Enter global configuration mode
Ruijie(config)# smart manager applet
applet-name [class class-options]
Enter SEM configuration mode.
applet-name is the specified policy name.
class parameter specifies the policy class.
To Next Page
Loading...
