Extreme Networks ExtremeWare Command Reference Manual page 621

Events, Components, and Subcomponents. As mentioned, a single event can be included or
excluded by specifying the event's name. Multiple events can be added or removed by specifying an
ExtremeWare component name plus an optional severity. Some components, such as BGP, contain
subcomponents, such as Keepalive, which is specified as BGP.Keepalive. Either components or
subcomponents can be specified. The keyword
indicate all ExtremeWare components.
Severity Levels. When an individual event name is specified following the events keyword, no
severity value is needed since each event has pre-assigned severity. When a component, subcomponent,
or the keyword is specified following the
all
severity is specified, the severity used for each applicable subcomponent is obtained from the
pre-assigned severity threshold levels for those subcomponents. For example, if STP were specified as
the component, and no severity is specified for the add of an include item, then only messages with
severity of
error
. If STP.InBPDU were specified as the component, and no severity is specified, then only messages
error
with severity of
subcomponent is
The severity keyword
of (or
delete
component of all severity values.
NOTE
If no severity is specified when delete or exclude is specified, severity all is used
If the keyword is present following the severity value, then only the events in the specified
only
component at that exact severity are included. Without the
component at that severity or more urgent are included. For example, using the option
implies critical, error, or warning events, whereas the option
warning
warning events only. Severity
Any EMS events with severity
unless debug mode is enabled
Filter Optimization. Each time a
the events specified are compared against the current configuration of the filter to try to logically
simplify the configuration.
For example, if the command:
configure log filter bgpFilter1 add events bgp.keepalive severity error only
were to be followed by the command:
configure log filter bgpFilter1 add events bgp severity info
the filter item in the first command is automatically deleted since all events in the BGP.Keepalive
subcomponent at severity
first command redundant.
As another example, a new exclude filter item may not need to be added if no current include filter
items contain any of the events described in the exclude statement. To illustrate, suppose a new filter
were created and configured as follows:
create log filter myFilter
ExtremeWare Software 7.3.0 Command Reference Guide
and greater would be passed, since the threshold severity for the STP component is
and greater would be passed, since the threshold severity for the STP.InPBDU
warning
. Use the
warning show log components
can be used as a convenience when
all
) with severity
exclude all
all only
debug-summary
configure log filter
would be also included as part of the second command, making the
error
in place of a component name can be used to
all
keyword, a severity value is optional. If no
events
command to see this information.
delete
deletes (or excludes) previously added events of the same
keyword, events in the specified
only
is not a valid choice.
, , or
debug-verbose
command is issued for a given filter name,
configure log filter events
or is specified. The use
exclude
severity
severity warning only
will not be logged
debug-data
implies
621