|
2. Using filters
A filter is a condition of which entries to view in SyslogView - it
can either be used to see a certain type of entries or to avoid seeing a
certain type of entries, a so called negative filter. For instance, a filter
defined to only show firewall logs will, when active, only allow entries from
the firewall to be displayed. A negative filter defined to not show firewall
entries will, when active, remove all firewall entries from being displayed,
while all other entries will be displayed. All filters are superimposed on each
other, together with Quickfilters.
Quickfilters are dynamically defined in the
top portion of SyslogViews' ordinary window. Although very similar to filters,
Quickfilters are only temporary; they are not saved. Instead their purpose is
to allow the user to quickly use a basic filter. Quickfilters are superimposed
in the regular filters, thereby providing a very efficient filtering
combination. Filters can usually be classified as belonging to one of three
groups:
-
A specific filter used to find a
certain type of entries
Example: Finding backup entries with severity of
warning or higher
-
A generic filter used in combination with
other filters
Example: A filter specifying all switches
-
A negative filter used to avoid a certain
type of entry
Example: A filter filtering out log entries of a
successful printout
|
