esi parser rule
esi parser rule <rule_name>
[condition <expression>] |
[domain <name>] |
[enable]
[match {ipaddr <expression> | mac <expression> | user <expression> }] |
[no] |
[position <position>] |
[set {blacklist | role <role>} |
[test {msg <msg> | file <filename>}]
Description
This command creates or changes an ESI syslog parser rule.
Syntax
Parameter
condition
domain
enables
match
no
position
set
test
Usage Guidelines
The user creates an ESI rule by using characters and special operators to specify a pattern that uniquely identifies a
syslog message. This "condition" defines the type of message and the ESI domain to which this message pertains.
The rule contains three major fields:
Condition: The pattern that uniquely identifies the syslog message type.
l
User: The username identifier. It can be in the form of a name, MAC address, or IP address.
l
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Description
Specifies the REGEX (regular expression) pattern that uniquely
identifies the syslog.
(Optional.) Specify the ESI syslog parser domain to which this rule
applies. If not specified, the rule matches with all configured ESI
servers.
Enables this rule.
Note: The condition, user match, and set action parameters must be
configured before the rule can be enabled.
Specifies the user identifier to match, where ipaddr, mac, and
user take a REGEX pattern that uniquely identifies the user.
Negates any configured parameter.
Specifies the rule's priority position.
Specifies the action to take: blacklist the user or change the user
role.
Note: The role entity should be configured before it is accepted by
the ESI rule.
Test the regular expression output configured in the
esi parser rules command. You can test the expressions
against a specified syslog message, or test the expression against a
sequence of syslog messages contained in a file.
Range
Default
—
—
—
—
—
Not enabled
—
—
—
—
1–32; 1
—
highest
—
—
—
—
esi parser rule | 253