Black Box LS1016A, Руководство пользователя

Страница: 260 / 450

Syslog
260 BLACK BOX ® Advanced Console Server
Example to listen to messages from one client (IP address=10.0.0.1) on UDP port 999:
source s_udp_10 { udp(ip(10.0.0.1) port(999)); };
Task 3: Define filters.
To define filters use this statement:
filter <identifier> { expression; };
where:
The following internal functions are available:
Some Examples of Defining Filters
1) To filter by facility:
filter f_facilty { facility(<facility name>); };
identifier Has to uniquely identify this given filter.
expression
Boolean expression using internal functions, which has to evaluate to true
for the message to pass.
a) facility(<facility
code>) Selects messages based on their facility code.
b) level(<level code>) or
priority(<level code>)
Selects messages based on their priority.
c) program(<string>) Tries to match the <string> to the program name field of the
log message.
d) host(<string>) Tries to match the <string> to the hostname field of the log
message.
e) match(<string>) Tries to match the <string> to the message itself.