Novell OPEN ENTERPRISE SERVER 2 SP2 - STORAGE SERVICES AUDITING CLIENT LOGGER UTILITY REFERENCE 04-29-2010 Reference page 27

(*)
Includes all elements.
(OPEN CLOSE RENAME)
Includes only the
OPEN
(* !OPEN)
Includes all events except
This list could also have been specified as
removed after first creating a list of events that are included (non-negated).
(OPEN CLOSE !RENAME)
Includes only the
OPEN
The is not necessary here because it was never included. Typically, you add the
!RENAME
excluded events in the list only when you use the asterisk (
(!* OPEN CLOSE)
Excludes all events. No events are included because all events were excluded.
This example illustrates that you can put the
The and
OPEN CLOSE
processed after the included (non-negated) events. In effect, this list includes the
events, then excludes all events.
CLOSE
(OPEN !OPEN CLOSE)
Includes only the
CLOSE
The and
OPEN !OPEN
Event Sub-Types NSS, NCP, and CIFS
Each event in the list can also specify a list of event sub-types to include or exclude. These are
specified in parentheses immediately after the operation name. Event sub-types are delimited by a
space or tab.
Valid event sub-types are:
NSS
NCP
CIFS
The asterisk ( ) can be used to include all event sub-types.
*
If no sub-types are specified, they are all included by default.
The exclamation mark (
!
The sub-types can occur in any order in the parentheses. When parsing a sub-type list, a list of
included (non-negated) sub-types is created first, then the excluded (negated) sub-types (that is,
those with the
[! or -]
, , and events.
CLOSE RENAME
.
OPEN
(!OPEN *)
and events.
CLOSE
[! or -]
event names have no effect because all excluded (negated) events are
event.
cancel each other out.
) or minus ( ) characters can precede a sub-type to exclude it.
-
exclusion character in front of them) are removed from that list.
. All excluded (negated) events are
) to specify all events.
*
character in front of the asterisk (
VLOG Utility Man Page
).
*
and
OPEN
27