evmfilterfile.4 (2010 09)
e
evmfilterfile(4) evmfilterfile(4)
The previous filter lines are equivalent to this more complex single filter line:
value "([priority >= 200]) OR [name *.mylog] AND NOT [name *.oldlog]"
The first line selects all events with a priority of 200 or greater, the next modifies this by selecting all
events from mylog regardless of their priorities, and the last line excludes all
oldlog events regardless
of their priorities.
If you prefer, you can omit the
value
command, and build the complete filter string from include and
exclude lines.
Notes
If you are concerned with allowing your file to be used on other systems that support EVM in the future,
you should use the built-in macro
@SYS_VP@ in place of the first two components (
sys.unix) of the
name of any system event. This will make it unnecessary to change the file if the other system uses a
different event name prefix.
EXTERNAL INFLUENCES
Environment Variables
EVM_FILTERDIR
A colon-separated set of directory pathnames to be searched for a requested filter
file. If this variable is present in the environment the directories are searched in
place of the standard directories.
EXAMPLES
1. The following is an example of a pair of entries in a filter file:
# Select all events posted by myapp, excluding any that
# have a priority lower than 200:
filter
{ name myapp
value "[name myco.myapp.*]"
exclude "[pri < 200]"
title "All myapp events"
}
# Select all events posted by myapp, and important system events:
filter
{ name sys_myapp
value "[name myco.myapp.*] | \
([name @SYS_VP@.*] & [priority >= 400])"
title "System errors and myapp events"
}
2. The following command finds and displays all EVM events, using a filter stored in the supplied filter
file /usr/share/evm/filters/sys.evf
:
evmget -f @sys:evm | evmshow
3. Assuming that the filter file shown in the first example is named myapp.evf and is located in a stan-
dard filter directory, the following command displays the value of the sys_myapp filter from that file:
evmshow -F -f @myapp:sys_myapp
FILES
/var/evm/adm/filters/*.evf Site-specific filter files.
/usr/share/evm/filters/*.evf System filter files.
SEE ALSO
Commands
evmget(1), evmshow(1), evmwatch(1).
Routines
EvmFilterCreate(3), EvmFilterDestroy(3), EvmFilterIsFile(3), EvmFilterReadFile(3), EvmFilterSet(3),
EvmFilterTest(3).
2 Hewlett-Packard Company − 2 − HP-UX 11i Version 3: September 2010