Novell OPEN ENTERPRISE SERVER 2 SP2 - STORAGE SERVICES AUDITING CLIENT LOGGER UTILITY REFERENCE 04-29-2010 Reference page 28

Event Sub-Type Examples
This section provides examples of event element patterns and a description of how each might be
applied.
(*)
Matches all events.
(OPEN)
Matches all
(OPEN CLOSE)
Matches only the
(OPEN(NSS) CLOSE(NSS))
Matches only the NSS
(* !OPEN)
Matches all events (including the NSS, NCP, and CIFS sub-types) except the
(* !OPEN(NSS) !CLOSE(NSS))
Matches all events except the NSS
(* !OPEN(* !NSS) !CLOSE(* !NSS))
Matches all events except the non-NSS
Filter Pattern Examples
This section provides examples of filter patterns and a description of how each might be applied.
These examples are specific to entries in the filter file (when using the
option).
VOL1:/abc/* (*)
Include: Matches all events on any file in the
subdirectories are not included.
VOL1:/abc/** (*)
Include: Matches all events on any file in the
subdirectories.
VOL1:/abc/* (OPEN CLOSE)
Include: Matches only
events on files in subdirectories are not included.
VOL1:/abc/* (* !OPEN !CLOSE)
Include: Matches all events except the
directory.
VOL1:/abc/* (OPEN(NSS) CLOSE(NSS))
Include: Matches only NSS
directory.
28 OES 2 SP2: NSS Auditing Client Logger (VLOG) Utility Reference
events (including the NSS, NCP, and CIFS sub-types).
OPEN
and events (including the NSS, NCP, and CIFS sub-types).
OPEN CLOSE
and NSS
OPEN
OPEN
and
OPEN CLOSE
and NSS
OPEN
events.
CLOSE
and NSS events.
CLOSE
and non-NSS
OPEN CLOSE
directory. The events on files in
VOL1:/abc
directory and any of its
VOL1:/abc
events on any file in the
and events on any file in the
OPEN CLOSE
events on any file in the
CLOSE
event.
OPEN
events.
[-F, --filterFile]
directory. The
VOL1:/abc
VOL1:/abc
VOL1:/abc