303
Parameters
priority level: Specifies the lowest severity level for matching log messages. The level argument can be an
integer in the range of 0 to 7, or the word all, which represents any severity level from 0 to 7. A lower
number represents higher priority level. For example, specify a severity level of 3 to match log messages
from level 3 to level 0.
msg msg: Specifies a regular expression to match the message body, a string of 1 to 255 characters. The
log message must use the HP format. For more information about log message formats, see "Configuring
the information center."
occurs times period period: Executes the policy if the number of log matches over an interval exceeds the
limit. The times argument specifies the maximum number of log matches in the range of 1 to 32. The
period argument specifies an interval in the range of 1 to 4294967295 seconds.
Usage guidelines
Use Syslog event monitor policies to monitor log messages.
EAA executes a Syslog event monitor policy when the number of matching logs over an interval reaches
the limit.
NOTE:
EAA does not count log messages generated by the RTM module when it counts log matches.
You can configure only one event for a monitor policy. If the monitor policy already contains an event, the
new event replaces the old event.
Examples
# Configure a CLI-defined policy to monitor Syslog messages for level 3 to level 0 messages that contain
the down string. Enable the policy to execute when five log matches are found within 6 seconds.
<Sysname> system-view
[Sysname] rtm cli-policy syslog
[Sysname-rtm-syslog] event syslog priority 3 msg down occurs 5 period 6
rtm cli-policy
Use rtm cli-policy to create a CLI-defined EAA monitor policy and enter its view.
Use undo rtm cli-policy to delete a CLI-defined monitor policy.
Syntax
rtm cli-policy policy-name
undo rtm cli-policy policy-name
Default
No CLI-defined monitor policy exists.
Views
System view
Predefined user roles
network-admin
To Next Page
Loading...
Need help?
General
