Specifications

configure log filter events
ExtremeWare XOS 10.1 Command Reference Guide 245
configure log filter events
configure log filter <name> [add | delete] {exclude} events
[<event-condition> | [all | <event-component>] {severity <severity>
{only}}]
Description
Configures a log filter by adding or deleting a specified set of events.
Syntax Description
Default
If the exclude keyword is not used, the events will be included by the filter. If severity is not
specified, then the filter will use the component default severity threshold (see the note on page 246
when
delete or exclude is specified).
Usage Guidelines
This command controls the incidents that pass a filter by adding, or deleting, a specified set of events. If
you want to configure a filter to include or exclude incidents based on event parameter values (for
example, MAC address or BGP Neighbor) see the command
configure log filter events match
on page 248.
When the add keyword is used, the specified event name is added to the beginning of the filter item list
maintained for this filter. The new filter item either includes the events specified, or if the
exclude
keyword is present, excludes the events specified.
The delete keyword is used to remove events from the filter item list that were previously added using
the add command. All filter items currently in the filter item list that are identical to, or a subset of, the
set of events specified in the delete command will be removed.
Event Filtering Process. From a logical standpoint, the filter associated with each enabled log target
is examined to determine whether a message should be logged to that particular target. The
determination is made for a given filter by comparing the incident with the most recently configured
filter item first. If the incident matches this filter item, the incident is either included or excluded,
depending on whether the
exclude keyword was used. Subsequent filter items on the list are compared
if necessary. If the list of filter items has been exhausted with no match, the incident is excluded.
name Specifies the filter to configure.
add Add the specified events to the filter
delete Remove the specified events from the filter
exclude Events matching the specified events will be excluded
event-condition Specifies an individual event.
all Specifies all components and subcomponents.
event-component Specifies all the events associated with a particular component.
severity Specifies the minimum severity level of events (if the keyword only is omitted).
only Specifies only events of the specified severity level.