Specifications

Event Management System/Logging
ExtremeWare XOS 11.0 Concepts Guide 141
Displaying Event Logs
The log stored in the memory buffer and the NVRAM can be displayed on the current session (either
the console display or telnet). To display the log, use the following command:
show log {messages [memory-buffer | nvram]} {events {<event-condition> |
<event-component>]} {<severity> {only}} {starting [date <date> time <time> | date
<date> | time <time>]} {ending [date <date> time <time> | date <date> | time <time>]}
{match <regex>} {chronological}
You can use many options to select those log entries of interest. You can select to display only those
messages that conform to the specified:
• Severity
• Starting and ending date and time
• Match expression
The displayed messages can be formatted differently from the format configured for the targets, and
you can choose to display the messages in order of newest to oldest or in chronological order (oldest to
newest).
Uploading Event Logs
The log stored in the memory buffer and the NVRAM can be uploaded to a TFTP server. Use the
following command to upload the log:
upload log <ipaddress> <filename> {messages [memory-buffer | nvram] {events
{<event-condition> | <event_component>}}} {<severity> {only}} {starting [date <date>
time <time> | date <date> | time <time>]} {ending [date <date> time <time> | date
<date> | time <time>]} {match <regex>} {chronological}
You must specify the TFTP host and the filename to use in uploading the log. There are many options
you can use to select the log entries of interest. You can select to upload only those messages that
conform to the specified:
• Severity
• Starting and ending date and time
• Match expression
The uploaded messages can be formatted differently from the format configured for the targets, and you
can choose to upload the messages in order of newest to oldest or in chronological order (oldest to
newest).
Displaying Counts of Event Occurrences
EMS adds the ability to count the number of occurrences of events. Even when an event is filtered from
all log targets, the event is counted. (The exception to this is events of any of the debug severities,
which are only counted when the log debug mode is enabled.) To display the event counters, use the
following command:
show log counters {<event condition> | [all | <event component>]} {include | notified
| occurred} {severity <severity> {only}}}
The system displays two counters. One counter displays the number of times an event has occurred,
and the other displays the number of times that notification for the event was made to the system for