Netgear XCM8806 Chassis User Manual - Page 220

NETGEAR 8800 User Manual Filtering By Components and Conditions You may want to send the messages that come from a specific component that makes up XCM8800 or to send the message generated by a specific condition. For example, you might want to send only those messages that come from the STP component, or send the message that occurs when the IP.Forwarding.SlowPathDrop condition occurs. Or you may want to exclude messages from a particular component or event. To do this, you construct a filter that passes only the items of interest, and you associate that filter with a target. The first step is to create the filter using the create log filter command. You can create a filter from scratch, or copy another filter to use as a starting point. (It may be easiest to copy an existing filter and modify it.) To create a filter, use the following command: create log filter {copy } If you create a filter from scratch, that filter initially blocks all events until you add events (either the events from a component or a specific event condition) to pass. You might create a filter from scratch if you want to pass a small set of events and to block most events. If you want to exclude a small set of events, use the default filter that passes events at or above the default severity threshold (unless the filter has been modified), named DefaultFilter, that you can copy to use as a starting point for your filter. After you create your filter, you configure filter items that include or exclude events from the filter. Included events are passed; excluded events are blocked. To configure your filter, use the following command: configure log filter [add | delete] {exclude} events [ | [all | ] {severity {only}}] For example, if you create the filter myFilter from scratch, use the following command to include events: configure log filter myFilter add events stp All STP component events of at least the default threshold severity passes myFilter (for the STP component, the default severity threshold is error). You can further modify this filter by specifying additional conditions. For example, assume that myFilter is configured as before, and assume that you want to exclude the STP.CreatPortMsgFail event. To add that condition, use the following command: configure log filter myFilter add exclude events stp.creatportmsgfail You can also add events and subcomponents to the filter. For example, assume that myFilter is configured as before, and you want to include the STP.InBPDU subcomponent. To add that condition, use the following command: configure log filter myFilter add events stp.inbpdu You can continue to modify this filter by adding more filter items. The filters process events by comparing the event with the most recently configured filter item first. If the event matches this filter item, the incident is either included or excluded, depending on whether the exclude keyword was used. if necessary, subsequent filter items on the list are compared. If the list of filter items is exhausted with no match, the event is excluded and is blocked by the filter. 220 | Chapter 8. Status Monitoring and Statistics