evmfilter.5 (2010 09)
e
EvmFilter(5) EvmFilter(5)
Notes
Successive versions of EVM may evolve the filter syntax by adding new keywords or operators.
EXAMPLES
The following table shows a number of filter specifications, and the interpretation given to each.
Filter String Interpretation
Any named event."[name *]"
All events with names that start
with
myco.
"[name myco.*]"
All events with names that do not
start with
myco.
"![name myco.*]"
Any event with a name that has
at least three components.
"[name ?.?.?]"
Any event with a name that has
the first two components
myco.myapp.
"[name myco.myapp.*]"
Any event with a name that has
the first two components
myco.myapp. Identical in
meaning to the previous filter
string.
"[name myco.myapp]"
Events which have
sys.unix.syslog as the first
three components of the name.
"[name sys.unix.syslog]"
Any event name that starts with
the components
myco.myapp
and ends with showme,no
matter how many components are
included between.
"[name myco.myapp.*.showme]"
Any event posted today."[age < 1d]"
Any event posted within the last 4
weeks.
"[age < 4w]"
Any event posted within the last
30 seconds.
"[age lt 30s]"
Any event posted before today."[age gt 1d]"
Any event posted on June 1, 2000."[time 2000:6:1:*:*:*:*]"
Any event posted on June 1 or
June 3, 2000.
"[time 2000:6:1,3:*:*:*:*]"
Any event posted between June 1
and June 3, 2000.
"[time 2000:6:1-3:*:*:*:*]"
Any event posted between June 1
and June 3, 2000, or between
June 5 and June 7, 2000,
inclusive.
"[time 2000:6:1-3,5-7:*:*:*:*]"
All events occurring between mid-
night and 2:59:59 a.m., inclusive.
"[time *:*:*:*:00-02:*:*]"
All events occurring after 3:00
a.m. on June 1, 2000.
"[since 2000:6:1:03:00:00]"
All events occurring before 3:00
a.m. on June 1, 2000.
"[before 2000:6:1:03:00:00]"
All events with priority greater
than 500
"[prio > 500]"
"[name myco.myapp] & [pri >= 500]"
All events that have names starting with myco.myapp and priority
at least 500.
"[name myco.myapp] | [pri >= 500]"
All events that have names starting with myco.myapp or that have
priority at least 500.
HP-UX 11i Version 3: September 2010 − 3 − Hewlett-Packard Company 3