Technical data

Using Syslog Messaging to Monitor Router Events

303561-A Rev 00

C-19

Task 6: Adding an Entity Filter for a Remote Host

Once you define a host in the Syslog host table, add (define) an entity-specific

message filter for the host.

If this is not the first filter for a given entity and remote host pair, first obtain a list

of filter instances, as follows:

list -i wfSyslogEntFltrEntry

From the resulting list of instance IDs (of the form

<host_IP_address>.<entity_code>.<filter_index>), determine the next

<filter_index> number available to assign to a new filter, for a given

<host_IP_address>.<entity_code> pair. The number you assign to the new filter

will have a value of one higher than the highest <filter_index> in the list.

Now proceed to step 1.

Create a new filter for the desired entity and remote host pair by first

creating an entry in the Syslog Entity Filter table, as follows:

$: set WfSyslogEntityFilterTable.WfSyslogEntFltrDelete.

<host_IP_address>.<entity_code>.<filter_index>

1;commit

<host_IP_address> is the IP address of the desired remote host (a

management workstation).

<entity_code> identifies the software entity for which you want Syslog to

forward event messages to the remote host at the <host_IP_address>.

<filter_index> is the next available index number you can assign to a filter for

the desired entity and remote host pair.

After you create an entity filter for a specific host, define:

• An event number (or range) and a slot number (or range)

• A severity mask and a slot number (or range)

Note:

The filter remains inactive until you define the event and slot number(s),

or the severity mask and slot number(s).