Syslog
260
BLACK BOX
®
Advanced Console Server
Example to listen to messages from one client (IP address=10.0.0.1) on UDP port 999:
source s_udp_10 { udp(ip(10.0.0.1) port(999)); };
Task 3: Define filters.
To define filters use this statement:
filter <identifier> { expression; };
where:
The following internal functions are available:
Some Examples of Defining Filters
1) To filter by facility:
filter f_facilty { facility(<facility name>); };
identifier
Has to uniquely identify this given filter.
expression
Boolean expression using internal functions, which has to evaluate to true
for the message to pass.
a) facility(<facility
code>)
Selects messages based on their facility code.
b)
level(<level code>) or
priority(<level code>)
Selects messages based on their priority.
c)
program(<string>)
Tries to match the <string> to the program name field of the
log message.
d)
host(<string>)
Tries to match the <string> to the hostname field of the log
message.
e)
match(<string>)
Tries to match the <string> to the message itself.
