Extreme Networks ExtremeWare 7.2e Installation And User Manual page 132

Status Monitoring and Statistics
single character while other characters match only themselves (case is significant). Quantifiers include
the star character (*) that matches zero or more occurrences of the immediately preceding token.
Constraints include the caret character (^) that matches at the beginning of a message, and the currency
character ($) that matches at the end of a message. Bracket expressions are not supported. There are a
number of sources available on the Internet and in various language references describing the operation
of regular expressions. Table 28 shows some examples of regular expressions.
Table 28: Simple Regular Expressions
Regular Expression
port
.ar
port.*vlan
myvlan$
Matching Parameters
Rather than using a text match, ExtremeWare's EMS allows you to filter more efficiently based on the
message parameter values. In addition to event components and conditions and severity levels, each
filter item can also use parameter values to further limit which messages are passed or blocked. The
process of creating, configuring, and using filters has already been described in the section, "Filtering
By Components and Conditions", so this section will discuss matching parameters with a filter item. To
configure a parameter match filter item, use the following command:
configure log target [console-display | memory-buffer | nvram | session |
syslog [<host name/ip> {: <udp-port>} [local0 ... local7]]]
filter <filter name> {severity <severity> {only}}
Each event in ExtremeWare is defined with a message format and zero or more parameter types. The
show log events detail
parameter types). Only those parameter types that are applicable given the events and severity specified
are exposed on the CLI. The <value> depends on the parameter type specified. As an example, an event
may contain a physical port number, a source MAC address, and a destination MAC address. To allow
only those Bridging incidents, of severity
the following command:
configure log filter myFilter add events bridge severity notice match source
mac-address 00:01:30:23:C1:00
The string type is used to match a specific string value of an event parameter, such as a user name. A
string can be specified as a simple regular expression.
Use the keyword to specify multiple parameter type/value pairs that must match those in the
and
incident. For example, to allow only those events with specific source and destination MAC addresses,
use the following command:
132
Matches
port 2:3
import cars
portable structure
baar
bazaar
rebar
port 2:3 in vlan test
add ports to vlan
port/vlan
delete myvlan
error in myvlan
command can be used to display event definitions (the event text and
and above, with a specific source MAC address, use
notice
Does not match
poor
por
pot
bar
myvlan port 2:3
ports 2:4,3:4 myvlan link down
ExtremeWare 7.2e Installation and User Guide