331
occurs times period period
: Executes the policy if the number of log matches over an interval
exceeds the limit. The
times
argument specifies the maximum number of log matches in the range of
1 to 32. The
period
argument specifies an interval in the range of 1 to 4294967295 seconds.
Usage guidelines
Use Syslog event monitor policies to monitor log messages.
EAA executes a Syslog event monitor policy when the number of matching logs over an interval
reaches the limit.
NOTE:
EAA does not count log messages generated by the RTM module when it counts log matches.
You can configure only one event for a monitor policy. If the monitor policy already contains an event,
the new event replaces the old event.
Examples
# Configure a CLI-defined policy to monitor Syslog messages for level 3 to level 0 messages that
contain the
down
string. Enable the policy to execute when five log matches are found within 6
seconds.
<Sysname> system-view
[Sysname] rtm cli-policy test
[Sysname-rtm-test] event syslog priority 3 msg down occurs 5 period 6
rtm cli-policy
Use
rtm cli-policy
to create a CLI-defined EAA monitor policy and enter its view, or enter the view of
an existing CLI-defined EAA monitor policy.
Use
undo rtm cli-policy
to delete a CLI-defined monitor policy.
Syntax
rtm cli-policy policy-name
undo rtm cli-policy policy-name
Default
No CLI-defined monitor policies exist.
Views
System view
Predefined user roles
network-admin
Parameters
policy-name
: Specifies the name of a CLI-defined monitor policy, a case-sensitive string of 1 to 63
characters.