Use the following CLI syntax to configure a log filter:
config>log
filter filter-id
default-action {drop | forward}
description description-string
entry entry-id
action {drop | forward}
description description-string
match
application {eq | neq} application-id
message {eq | neq} pattern pattern [regexp]
number {eq | neq | lt | lte | gt | gte} event-id
router {eq | neq} router-instance [regexp]
severity {eq | neq | lt | lte | gt | gte} severity-level
subject {eq | neq} subject [regexp]
The following displays an example of the log filter configuration command syntax:
config# log
config>log# filter 1
config>log>filter# description "This is a test filter."
config>log>filter# default-action drop
config>log>filter# entry 1
config>log>filter>entry$ action forward
config>log>filter>entry# match application eq atm
config>log>filter>entry# match severity eq critical
config>log>filter>entry# exit
The following displays the log filter configuration:
ALU-12>config>log# info
#------------------------------------------
echo "Log Configuration"
#------------------------------------------
file-id 1
description "This is our log file."
location cf3:
rollover 600 retention 24
exit
filter 1
default-action drop
description "This is a test filter."
entry 1
action forward
match
application eq "atm"
severity eq critical
exit
exit
exit
...
log-id 2
shutdown
description "This is a test log file."
filter 1
from main security
to file 1
exit
...
------------------------------------------
ALU-12>config>log#