Novell OPEN ENTERPRISE SERVER 2 SP2 - STORAGE SERVICES AUDITING CLIENT LOGGER UTILITY REFERENCE 04-29-2010, Справочник

Страница: 28 / 32

28 OES 2 SP2: NSS Auditing Client Logger (VLOG) Utility Reference
n
ov
do
cx (e
n)
16
Ap
ril 20
10
Event Sub-Type Examples
This section provides examples of event element patterns and a description of how each might be
applied.
(*)
Matches all events.
(OPEN)
Matches all
OPEN
events (including the NSS, NCP, and CIFS sub-types).
(OPEN CLOSE)
Matches only the
OPEN
and
CLOSE
events (including the NSS, NCP, and CIFS sub-types).
(OPEN(NSS) CLOSE(NSS))
Matches only the NSS
OPEN
and NSS
CLOSE
events.
(* !OPEN)
Matches all events (including the NSS, NCP, and CIFS sub-types) except the
OPEN
event.
(* !OPEN(NSS) !CLOSE(NSS))
Matches all events except the NSS
OPEN
and NSS
CLOSE
events.
(* !OPEN(* !NSS) !CLOSE(* !NSS))
Matches all events except the non-NSS
OPEN
and non-NSS
CLOSE
events.
Filter Pattern Examples
This section provides examples of filter patterns and a description of how each might be applied.
These examples are specific to entries in the filter file (when using the
[-F, --filterFile]
option).
VOL1:/abc/* (*)
Include: Matches all events on any file in the
VOL1:/abc
directory. The events on files in
subdirectories are not included.
VOL1:/abc/** (*)
Include: Matches all events on any file in the
VOL1:/abc
directory and any of its
subdirectories.
VOL1:/abc/* (OPEN CLOSE)
Include: Matches only
OPEN
and
CLOSE
events on any file in the
VOL1:/abc
directory. The
events on files in subdirectories are not included.
VOL1:/abc/* (* !OPEN !CLOSE)
Include: Matches all events except the
OPEN
and
CLOSE
events on any file in the
VOL1:/abc
directory.
VOL1:/abc/* (OPEN(NSS) CLOSE(NSS))
Include: Matches only NSS
OPEN
and NSS
CLOSE
events on any file in the
VOL1:/abc
directory.