Configuring A Log Filter - Novell ACCESS MANAGER 3.1 SP2 - ACCESS GATEWAY GUIDE 2010 Manual

4.2.4 Configuring a Log Filter

Use this procedure to specify the type of data that should be logged. You can restrict the information
in the following ways:
1 In the Administration Console, click Devices > Access Gateways > Edit > Logging > Log
Filters > [Name of Filter].
2 To change the name of the filter, specify a new name in the Log Filter Name text box.
3 To restrict events to specified IDs, event codes, or strings, click Advanced Options, then specify
a value for one or more of the following fields.
Use these options when you have been viewing log files, you have identified the information
you want to view, and you want to restrict the log entries to this information. When you enter
multiple values, use a comma to separate the values.
For information on the various tags used in the log files, see
in the Novell Access Manager 3.1 SP2 Administration Console
Device IDs: The AMDEVICEID# value identifies the device that performed the action. To
correlate the ID with the device, click Auditing > General Logging.
Authentication IDs: The AMAUTHID# value identifies the user for a specific session.
Specify one or more values.
Preamble (Match Any): The preamble is an optional string that usually identifies the
component generating the log, such as AGM or NIDS. Specify one or more values to match.
The entry is included whenever a string matches one of the listed values.
Preamble (Match All): The preamble is an optional string that usually identifies the
component generating the log, such as AGM or NIDS. Specify multiple values only if you want
the entry to include all the listed strings before it is logged.
Correlation Data (Match Any): The correlation data consists of correlation tags and data
unique to a specific type of trace. Specify one or more values to match. The entry is included
whenever a string matches one of the listed values.
Correlation Data (Match All): The correlation data consists of correlation tags and data
unique to a specific type of trace. Specify multiple values only if you want the entry to include
all the strings before it is logged.
Log Data (Match Any): The log data is the additional information that is included in the log
entry, such as
Apache Service is not responding in a timely manner
more values to match. The entry is included whenever a string matches one of the listed values.
Log Data (Match All): The log data is the additional information that is included in the log
entry, such as
Apache Service is not responding in a timely manner
multiple values only if you want the entry to include all the listed strings before it is logged.
Always Log Event Codes: The AM# value identifies the event code. Specify one or more
values to match.
4 To specify the information level, select one or more of the following Log Levels. These levels
are independent of each other. If you want both Error messages and Warning messages, you
need to select both levels.
Select All: Logs all levels of event information.
Warning: Logs events that might cause system processing to fail.
"Understanding the Log Format"
Guide.
. Specify one or
. Specify
Access Gateway Maintenance 129