evmfilterfile.4 (2010 09)

e
evmfilterfile(4) evmfilterfile(4)
NAME
evmfilterfile - Event Manager filter file
SYNOPSIS
filter {
name filter_name
valuex filter_value
include filter_element
exclude filter_element
title filter_title
}
DESCRIPTION
A filter file contains one or more filter descriptions, which can be referenced through certain EVM com-
mands by using indirect filter syntax. An indirect filter specifier has the following form:
@filename[:filter_name
]
In the previous indirect filter specifier, filename is the name of a filter file, and filter_name is the name of
a filter contained in the file. If no filter_name is specified, the first filter in the file is used.
By convention, filter file names should have the sufx
.evf. If a command cannot find the file with the
name as specified, it appends .evf and tries again.
If a relative pathname is given for a file, commands search for the file in each location specified by the
EVM_FILTERDIR environment variable if it is present. Otherwise the search is performed in the follow-
ing standard locations in turn, stopping as soon as the file is found:
The current working directory
/var/evm/adm/filters
/usr/share/evm/filters
Several supplied filter files, containing shortcut filters for many system events, can be found in the direc-
tory /usr/share/evm/filters
. System administrators should place site-specific filter files in
/var/evm/adm/filters
.
The filter file is made up of a series of keyword/value and keyword/group pairs. Values containing spaces
must be enclosed in double quotes. Strings may be continued across a newline by finishing the line with a
backslash character. Any portion of a line from an unquoted number sign (
#) to the end of line is a com-
ment. Blank lines are ignored.
The following keywords are recognized:
filter Introduces a filter group.
name filter_name Names the filter.
value filter_value The filter_value is a string that conforms to EVM filter syntax. See the
EvmFilter (5) manpage for information about filter syntax.
include filter_element
Modifies the current filter_value . See the description of the include and
exclude keywords below.
exclude filter_element
Modifies the current filter_value . See the description of the include and
exclude keywords below.
title filter_title The filter_title is a text string that describes the purpose of the filter. The title is
not currently used, but always should be included.
The
include and exclude keywords can appear multiple times in a filter group, allowing you to build
and maintain a filter in simple single-line increments. Each filter_element must be a valid filter string,
conforming to the syntax described in the EvmFilter (5) manpage. A complete filter string is assembled by
surrounding the initial filter with parentheses and appending the filter_element s to it, separating each
with a logical OR (for include)orAND NOT (for exclude) operator. For example:
value "[priority >= 200]"
include "[name *.mylog]"
exclude "[name *.oldlog]"
HP-UX 11i Version 3: September 2010 1 Hewlett-Packard Company 1

Summary of content (4 pages)