Log filter entry match commands

match

Syntax

[no] match

Context

config>log>filter>entry

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command creates or edits match criteria for a filter entry. When the match criteria is satisfied, the action associated with the entry is executed.

If more than one match parameter (within one match statement) is specified, all the criteria must be satisfied (and functional) before the action associated with the match is executed.

Use the application command to display a list of the valid applications.

Match context can consist of multiple match parameters (application, event-number, severity, subject), but multiple match statements cannot be entered per entry.

The no form of this command removes the match criteria for the entry-id.

application

Syntax

application {eq | neq} application-id

no application

Context

config>log>filter>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command adds a 7210 SAS application as an event filter match criterion.

A 7210 SAS application is the software entity that reports the event. Applications include IP, MPLS, OSPF, CLI, services, and so on. Only one application can be specified. The latest application command overwrites the previous command.

The no form of the command removes the application as a match criterion.

Default

no application

Parameters

eq | neq

Specifies the operator specifying the type of match. Valid operators are listed in the following table.

Table: Valid operators

Operator

Notes

eq

equal to

neq

not equal to

application-id

Specifies the application name string.

number

Syntax

number {eq | neq | lt | lte | gt | gte} event-id

no number

Context

config>log>filter>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command adds an application event number as a match criterion.

The event numbers uniquely identify a specific logging event within an application.

Only one number command can be entered per event filter entry. The latest number command overwrites the previous command.

The no form of the command removes the event number as a match criterion.

Default

no event-number

Parameters

eq | neq | lt | lte | gt | gte

This operator specifies the type of match. Valid operators are listed in the following table.

Table: Valid operators

Operator

Notes

eq

equal to

neq

not equal to

lt

less than

lte

less than or equal to

gt

greater than

gte

greater than or equal to

event-id

Specifies the event ID, expressed as a decimal integer.

Values

1 to 4294967295

router

Syntax

router {eq | neq} router-instance [regexp]

no router

Context

config>log>filter>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies the log event matches for the router.

Parameters

eq

Determines if the matching criteria should be equal to the specified value.

neq

Determines if the matching criteria should not be equal to the specified value.

router-instance

Specifies a router name up to 32 characters to be used in the match criteria.

regexp

Specifies the type of string comparison to use to determine whether the log event matches the value of router command parameters. When the regexp keyword is specified, the string in the router command is a regular expression string that is matched against the subject string in the log event being filtered.

severity

Syntax

severity {eq | neq | lt | lte | gt | gte} severity-level

no severity

Context

config>log>filter>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command adds an event severity level as a match criterion. Only one severity command can be entered per event filter entry. The latest severity command overwrites the previous command.

The no form of this command removes the severity match criterion.

Default

no severity

Parameters

eq | neq | lt | lte | gt | gte

Specifies the type of match. Valid operators are listed in the following table.

Table: Valid operators

Operator

Notes

eq

equal to

neq

not equal to

lt

less than

lte

less than or equal to

gt

greater than

gte

greater than or equal to

severity-level

Specifies the ITU severity level name. The following table lists severity names and corresponding numbers per ITU standards M.3100 X.733 and X.21 severity levels.

Table: Severity levels

Severity number

Severity name

1

cleared

2

indeterminate (info)

3

critical

4

major

5

minor

6

warning

Values

cleared, intermediate, critical, major, minor, warning

subject

Syntax

subject {eq|neq} subject [regexp]

no subject

Context

config>log>filter>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command adds an event subject as a match criterion.

The subject is the entity for which the event is reported, such as a port. In this case the port-id string would be the subject. Only one subject command can be entered per event filter entry. The latest subject command overwrites the previous command.

The no form of this command removes the subject match criterion.

Default

no subject

Parameters

eq | neq

Specifies the type of match. Valid operators are listed in the following table.

Table: Valid operators

Operator

Notes

eq

equal to

neg

not equal to

subject

Specifies a string used as the subject match criterion.

regexp

Specifies the type of string comparison to use to determine whether the log event matches the value of subject command parameters. When the regexp keyword is specified, the string in the subject command is a regular expression string that is matched against the subject string in the log event being filtered.

When the regexp keyword is not specified, the subject command string is matched exactly by the event filter.