Reference Guide

Table Of Contents
Dell PowerConnect ArubaOS 6.0 Command Line Interface | Reference Guide esi parser rule | 188
esi parser rule
esi parser rule <rule_name>
[condition <expression>] |
[domain <name>] |
[enable]
[match {ipaddr <expression> | mac <expression> | user <expression> }] |
[no] |
[position <position>] |
[set {blacklist | role <role>} |
[test {msg <msg> | file <filename>}]
Description
This command creates or changes an ESI syslog parser rule.
Syntax
Usage Guidelines
The user creates an ESI rule by using characters and special operators to specify a pattern that uniquely identifies
a syslog message. This “condition” defines the type of message and the ESI domain to which this message
pertains. The rule contains three major fields:
z Condition: The pattern that uniquely identifies the syslog message type.
z User: The username identifier. It can be in the form of a name, MAC address, or IP address.
z Action: The action to take when a rule match occurs.
Once a condition match occurs, no further rule-matching will be made. For the matching rule, only one action
can be defined.
For more details on the character-matching operators, repetition operators, and expression anchors used to
defined the search or match target, see the External Services Interface chapter in the ArubaOS User Guide.
Parameter Description Range Default
condition Specifies the REGEX (regular expression) pattern that uniquely
identifies the syslog.
——
domain (Optional.) Specify the ESI syslog parser domain to which this rule
applies. If not specified, the rule matches with all configured ESI
servers.
——
enables Enables this rule.
Note: The condition, user match, and set action parameters must be
configured before the rule can be enabled.
Not enabled
match Specifies the user identifier to match, where ipaddr, mac, and user
take a REGEX pattern that uniquely identifies the user.
——
no Negates any configured parameter.
position Specifies the rule’s priority position. 1–32; 1 highest
set Specifies the action to take: blacklist the user or change the user role.
Note: The role entity should be configured before it is accepted by the
ESI rule.
——
test Test the regular expression output configured in the esi parser rules
command. You can test the expressions against a specified syslog
message, or test the expression against a sequence of syslog
messages contained in a file.
——