Filter
Top Products
previous line count is read. For example, the file has one line. After the
poll interval elapses, the file is overwritten with two lines. Only the second
line is read on the next polling.
The adapter polls the SYS:SYTEM\SYS$LOG.ERR file by default.
Additional files can be specified with the LogSources keyword.
PollInterval
Specifies the frequency, in seconds, to poll each log file listed in the
LogSources keyword for new messages. The default value is 120 seconds.
PreFilter
An event matches a PreFilter statement when each attribute=value
specification in the PreFilter statement matches a message in the log file. A
PreFilter statement must contain at least the log file specification, and can
contain up to three additional specifications: event ID, event type, and
event source. The order of the attributes in the statement does not matter.
You can specify multiple values for each attribute by separating each with
a comma.
Each PreFilter statement must be on and contained in a single line, no
greater than 512 characters.
The PreFilter keyword is optional. All NetWare server log events are sent
to the adapter if prefilters are not specified.
PreFilterMode
Specifies whether NetWare server log events that match a PreFilter
statement are sent (PreFilterMode=IN) or ignored (PreFilterMode=OUT).
Valid values are IN, in, OUT,orout. The default is OUT.
The PreFilterMode keyword is optional; if PreFilterMode is not specified,
only events that do not match any PreFilter statements are sent to the
adapter.
If you set PreFilterMode=IN, make sure you have one or more PreFilter
statements defined as well.
Stop and restart the adapter for any changes to take effect.
Format File
The format file contains message format descriptions and their mapping to BAROC
events. The message fields of a NetWare server event are matched against the
format descriptions in this file and when a match succeeds, the corresponding IBM
Tivoli Enterprise Console event is generated by the adapter. The format file
contains predefined mappings for some common NetWare server events and can
be customized to add new messages.
A standard NetWare server event from the SYS$LOG.ERR file is written to an
ASCII message in the following sequence. Consult the appropriate NetWare
manuals for the meanings:
v The date (month-day-year) and time; for example: 7-25-98 1:33:57 am
v Module version-ID; for example: SERVER-4.11-25
v Severity, locus, and class; for example: Severity=10 Locus=1 Class=5
Note: The meanings of severity and class are not the same as those pertaining to
the IBM Tivoli Enterprise Console product.
v The message text
Chapter 4. NetWare Log File Adapter 57