CLI-defined policy view
Predefined user roles
priority level: Specifies the lowest severity level for matching log messages. The level argument can be an
integer in the range of 0 to 7, or the word all, which represents any severity level from 0 to 7. A lower
number represents higher priority level. For example, specify a severity level of 3 to match log messages
from level 3 to level 0.
msg msg-body: Specifies a regular expression to match the message body, a string of 1 to 255
characters. For more information about regular expressions, see Fundamentals Configuration Guide.
occurs times period period: Executes the policy if the number of log matches over an interval exceeds the
limit. The times argument specifies the maximum number of log matches in the range of 1 to 32. The
period argument specifies an interval in the range of 1 to 4294967295 seconds.
Use Syslog event monitor policies to monitor log messages.
EAA executes a Syslog event monitor policy when the number of matching logs over an interval reaches
EAA does not count log messages generated by the RTM module when it counts log matches.
You can configure only one event for one monitor policy. If the monitor policy already contains an event,
the new event replaces the old event.
# Configure a CLI-defined policy to monitor Syslog messages for level 3 to level 0 messages that contain
the down string. Enable the system to execute the policy when five log matches are found within 6
[Sysname] rtm cli-policy syslog
[Sysname-rtm-syslog] event syslog priority 3 msg down occurs 5 period 6
Use rtm cli-policy to create a CLI-defined EAA monitor policy and enter its view.
Use undo rtm cli-policy to delete a CLI-defined monitor policy.
rtm cli-policy policy-name
undo rtm cli-policy policy-name
No CLI-defined monitor policy exists.