Extreme Networks ExtremeWare XOS Guide Manual page 107

number of sources available on the Internet and in various language references describing the operation
of regular expressions. Table 20 shows some examples of regular expressions.
Table 20: Simple regular expressions
Regular Expression
port
..ar
port.*vlan
myvlan$
Matching Parameters
Rather than using a text match, EMS allows you to filter more efficiently based on the message
parameter values. In addition to event components and conditions and severity levels, each filter item
can also use parameter values to further limit which messages are passed or blocked. The process of
creating, configuring, and using filters has already been described in "Filtering By Components and
Conditions" on page 105, so this section describes matching parameters with a filter item. To configure a
parameter match filter item, use the following command:
configure log filter <name> [add | delete] {exclude} events [<event-condition> | [all
| <event-component>] {severity <severity> {only}}] [match | strict-match] <type>
<value>
Each event in ExtremeWare XOS is defined with a message format and zero or more parameter types.
The
show log events all
parameter types). Only those parameter types that are applicable given the events and severity specified
are exposed on the CLI. The syntax for the parameter types (represented by
syntax above) is:
[bgp [neighbor | routerid] <ip address>
| {destination | source} [ipaddress <ip address> | L4-port <L4-port>| mac-address
<mac-address>]
| {egress | ingress} [slot <slot number> | ports <portlist>]
| netmask <netmask>
| number <number>
| string <match expression>
| vlan <vlan name>
| vlan tag <vlan tag>]
The
<value>
port number, a source MAC address, and a destination MAC address. To allow only those radius
incidents, of severity
command:
configure log filter myFilter add events aaa.radius.requestInit secerity notice match
source mac-address 00:01:30:23:C1:00
ExtremeWare XOS 10.1 Concepts Guide
Matches
port 2:3
import cars
portable structure
baar
bazaar
rebar
port 2:3 in vlan test
add ports to vlan
port/vlan
delete myvlan
error in myvlan
command can be used to display event definitions (the event text and
depends on the parameter type specified. As an example, an event may contain a physical
and above, with a specific source MAC address, use the following
notice
Event Management System/Logging
Does Not Match
poor
por
pot
bar
myvlan port 2:3
ports 2:4,3:4 myvlan link down
in the command
<type>
107