HP-UX Event ManagerAdministrator's Guide

Using Event Manager
Introduction to Event Filters
Chapter 2 59
You can search for all such events by the following command:
# evmget -A -f '[name *._hwid]' | more
If you know the hardware identifier of a specific device, you can narrow
the search for events related to that device by using a command similar
to the following:
# evmget -A -f '[name *._hwid.4]' | more
Using Filter Files
You can save a useful filter in a file and recall it by using the Event
Manager's indirect filter facility. Filter files have names with the suffix
.evf, and can contain any number of named filters. For example, the
following filter file entry selects all evm user message events.
filter {
name user
value "[name @SYS_VP@.evm.msg.user]"
title "All EVM user message events"
}
In this example, the @SYS_VP@ is a standard Event Manager macro that
is replaced by sys.unix when the filter is used.
To use indirect filtering, specify the at (@) sign , followed by the name of
the file containing the filter instead of a filter string, as shown in the
following example:
# evmget -A -f @evm
You need not include the .evf suffix when you specify a filter file name
in such commands.
The previous example uses the first filter in the file, but you can choose a
different filter by specifying its name as follows:
# evmget -A -f @evm:user
You can include as many filters as you want in a single file, or you can
keep each filter in its own file. The preceding example specifies the evm
filter, which is included in the Event Manager. Other filters are provided
in the /usr/share/evm/filters directory. Use these files as examples
for establishing your own filter library.