HP-UX Reference (11i v3 07/02) - 5 Miscellaneous Topics (vol 9)

e
EvmFilter(5) EvmFilter(5)
NAME
EvmFilter - EVM (Event Management) event filter
DESCRIPTION
An event filter is a specification of a set of interesting events. Event subscribers use filters to tell the EVM
daemon which events they want to receive. For example, one subscriber may be only interested in receiv-
ing events reporting hardware errors, while another may want to receive all high-priority events, regard-
less of what they are reporting. If a subscriber does not set a filter, it will receive no events.
The Event Viewer and some of the EVM user commands also use filters to select events for viewing or pro-
cessing.
A filter is an ASCII character string. It can be very simple or arbitrarily complex. Complex filters are
created by combining simple filters.
A simple filter has the following format:
[keyword expr] | all | 1 | none | 0
The format of expr is specific to the type of filter. The left and right square brackets (
[ and ]) are required.
Keywords may be specified in any mix of upper and lower case, and where the underscore character (
_)is
included in a full-length keyword (as in
host_name), it may be omitted. Keywords may be abbreviated,
and in the following paragraphs the minimum abbreviation for each is indicated by upper-case letters.
Possible values for keyword and the associated expr are as follows:
Name event-name-specifier
Selects events with a name matching the event-name-specifier. Names are considered to match
when the event name matches as many components as included in the filter.
The event-name-specifier may include the
* and the ? characters as wildcards in any component
position. The
* represents 0 or more components with any value. The ? represents exactly one
component. Any event-name-specifier includes an implied trailing
.* wildcard.
Priority equality-operator integer
Only events with a priority meeting the specified evaluation will be passed. The integer value
may be 0 to 700, inclusive. See the following table for a description of equality-operator. May be
specified as prio.
Timestamp time-range-specifier
All events with a timestamp that is within the time-range-specifier are passed. See the descrip-
tion of time-range-specifier. May be specified as
time.
Age equality-operator age-specifier
Selects events that meet the age specification. See the description of age-specifier. The
equality-operator must specify
less-than or less-than-or-equal, meaning "newer
than", or
greater-than or greater-than-or-equal
, meaning "older than." The
equal or not equal operators are not allowed.
BEFore absolute-time-specifier
All events with a timestamp that is earlier than the absolute-time-specifier are passed. See the
description of absolute-time-specifier.
SINce absolute-time-specifier
All events with a timestamp that is equal to or later than the absolute-time-specifier are passed.
See the description of absolute-time-specifier.
EVent_id equality-operator integer
All events with an event_id meeting the specified evaluation will be passed. See EvmEvent(5) for
a description of the event_id. See the following table for a description of equality-operator. The
EVent_id keyword may be abbreviated to ID.
NONE or 0 A filter value of none or 0 (zero) passes no events.
ALL or 1 A filter value of all or 1 passes all events.
The available equality-operator specifiers and their alternate representations are shown in the following
table. The alternate representations may be used in any mix of upper and lower case.
154 Hewlett-Packard Company − 1 − HP-UX 11i Version 3: February 2007