HP-UX Reference (11i v3 07/02) - 4 File Formats (vol 8)

e
evmfilterfile(4) evmfilterfile(4)
NAME
evmfilterfile - Event Manager filter file
SYNOPSIS
filter {
name
filter_name
valuex filter_value
include filter_element
exclude filter_element
title filter_title
}
DESCRIPTION
A filter file contains one or more filter descriptions, which can be referenced through certain EVM com-
mands by using indirect filter syntax. An indirect filter specifier has the following form:
@filename[:filter_name
]
In the previous indirect filter specifier, filename is the name of a filter file, and filter_name is the name of a
filter contained in the file. If no filter_name is specified, the first filter in the file is used.
By convention, filter file names should have the suffix
.evf. If a command cannot find the file with the
name as specified, it appends
.evf and tries again.
If a relative pathname is given for a file, commands search for the file in each location specified by the
EVM_FILTERDIR environment variable if it is present. Otherwise the search is performed in the follow-
ing standard locations in turn, stopping as soon as the file is found:
• The current working directory
• /var/evm/adm/filters
• /usr/share/evm/filters
Several supplied filter files, containing shortcut filters for many system events, can be found in the direc-
tory /usr/share/evm/filters
. System administrators should place site-specific filter files in
/var/evm/adm/filters
.
The filter file is made up of a series of keyword/value and keyword/group pairs. Values containing spaces
must be enclosed in double quotes. Strings may be continued across a newline by finishing the line with a
backslash character. Any portion of a line from an unquoted number sign (
#) to the end of line is a com-
ment. Blank lines are ignored.
The following keywords are recognized:
filter Introduces a filter group.
name filter_name Names the filter.
value filter_value The filter_value is a string that conforms to EVM filter syntax. See the EvmFilter(5)
manpage for information about filter syntax.
include filter_element
Modifies the current filter_value. See the description of the include and exclude
keywords below.
exclude filter_element
Modifies the current filter_value. See the description of the include and exclude
keywords below.
title filter_title The filter_title is a text string that describes the purpose of the filter. The title is not
currently used, but always should be included.
The include and exclude keywords can appear multiple times in a filter group, allowing you to build
and maintain a filter in simple single-line increments. Each filter_element must be a valid filter string, con-
forming to the syntax described in the EvmFilter(5) manpage. A complete filter string is assembled by sur-
rounding the initial filter with parentheses and appending the filter_elements to it, separating each with a
logical OR (for include)orAND NOT (for exclude) operator. For example:
value "[priority >= 200]"
include "[name *.mylog]"
HP-UX 11i Version 3: February 2007 − 1 − Hewlett-Packard Company 91