HP-UX Event ManagerAdministrator's Guide

Using Event Manager
Introduction to Event Filters
Chapter 260
The evmshow -F command option provides an easy way for you to view
the contents of a stored filter. The F option causes the evmshow command
to display the filter string and then exit without reading any events. In
the following example, the evmshow command displays the contents of
the filter named user stored in the evm.evf file:
# evmshow -f @evm:user -F
( [name sys.unix.evm.msg.user] )
For complete information about the syntax of filter files, and where to
locate your files, see evmfilterfile (4) .
NOTE Do not edit the filter files provided in the /usr/share/evm/filters
directory. Your changes may be overwritten without warning by a future
installation update.