Concept Guide

esi parser domain
esi parser domain <name>
[no]|
[peer<peer-ip>]|
[server<ipaddr>]
Description
This command configures an ESI syslog parser domain.
Syntax
Parameter Description
no
Negates any configured parameter
peer
(Optional.) Specify the IP address of an another controller in this domain. These
controllers are notified when the user cannot be found locally. This command is needed
only when multiple controllers share a single ESI server
server
Specify the IP address of the ESI server to which the controller listens.
Usage Guidelines
The ESI parser is a generic syslog parser on the controller that accepts syslog messages from external third-
party appliances such as anti-virus gateways, content filters, and intrusion detection systems. It processes
syslog messages according to user-defined rules and takes configurable actions on the corresponding system
users.
ESI servers (see esi server on page 368) are configured into domains to which ESI syslog parser rules (see esi
parser rule on page 362) are applied.
Use the showesiparserdomains command to show ESI parser domain information.
Example
The following commands configure a virus syslog parser domain named “fortinet” which contains the ESI server
“forti_1” with the trusted IP address configured using the command esi server.
(host) (config) #esiparserdomainfortinet
server10.168.172.3
Command History
Introduced in ArubaOS 3.1.
Command Information
Platform License Command Mode
Available on all platforms Requires the PEFNG license Config mode on master or
local controllers
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide esi parser domain | 361