HP-UX Reference (11i v3 07/02) - 4 File Formats (vol 8)

e
evmlogger.conf(4) evmlogger.conf(4)
eventlog
Introduces a group of keyword/value pairs, which define an event log. Events that match the
log’s log_filter_spec are selected for handling by this log.
name eventlog_name
The name of the event log.
type log_type
The type of the log. Specify either
formatted or binary. If the log_path specifies
a terminal device, such as
/dev/console , the type is automatically set to
for-
matted
and cannot be forced to binary. If the log_path specifies a file, the default
type is
binary. Events are written to formatted logs as single lines of text, and to
binary logs as raw EVM events.
show_template template
The template used to format lines of text for a formatted log. If no template is
specified, the event timestamp and message are written. See the evmshow(1) man-
page for the template syntax.
logfile log_path
Path name of the log file. If a log is a disk file, the logger creates the file if necessary.
If the log name ends in the characters .dated, the logger replaces that suffix with
the current date in the form yyyymmdd. A new file is started when the first event is
written to the log each day.
alternate log_path
Specifies an alternate path to be used in cases where the primary log cannot be used.
If the log file specified by logfile log_path becomes unusable, the logger switches
to the alternate log file.
If the logger is writing to the alternate log, and the error condition which caused the
logger to switch has been cleared, you can revert to the primary log file by using the
evmreload -l command.
maxsize max_logsize
The maximum size, in kilobytes, that the log file may reach. If adding an event to the
file would cause this size to be exceeded, the logger begins a new file. The logger adds
the suffix _n to the name of the new file. The n is a sequentially generated number.
filter log_filter_spec
Specifies the event selection filter. Events passing this filter are selected for logging
to this event log; all others are ignored. See the EvmFilter(5) manpage for a descrip-
tion of filter syntax.
include filter_element
Modifies the current log_filter_spec. See the description of include and exclude
keywords in the The include and exclude Keywords subsection.
exclude filter_element
Modifies the current log_filter_spec. See the description of include and exclude
keywords in the The include and exclude Keywords subsection.
explicit_target bool_par
If this keyword is not specified, or if it is specified and bool_par has a value of FALSE,
NO,or0 (zero), the event log handles events posted through the local daemon.
Because EVM currently supports only local connection, this argument should not be
set to TRUE.
suppress
The suppression facility minimizes resource waste by limiting the number of identical
events appearing in the log. A description of the event suppression group follows.
Before being written to the log, each incoming event is matched against the suppres-
sion group’s supp_filter_spec. An event that passes the filter is then compared with
other events that have been posted during the last period minutes, ignoring the
timestamp, last_timestamp, PID, PPID, event-id and repeat-count data items. If a
matching event is found, and at least threshold instances of the event have been
written to the log during the period, the logger does not log the event. Instead, the
HP-UX 11i Version 3: February 2007 − 2 − Hewlett-Packard Company 95