HOME DOWNLOAD ORDER & PRICING RESELLERS CONTACT

SyslogServer Suite
Presentation >>

Software components

Customer Support

7. Advanced filter design
The way SyslogView is designed, the SQL syntax can be modified for more advanced functionality. A few examples will be mentioned here. This chapter assumes very basic knowledge of SQL syntax. Learn more about SQL from http://www.w3schools.com/sql/default.asp or other suitable web site or book.

Example: Suppose you want to find entries from your switches, but are not interested in Uplink and Downlink entries.

This could technically be solved using more than one filter. (One for choosing switches, one to avoid Uplink keyword and one to avoid Downlink keyword). Here we will solve it by modifying the SQL Query.

We start by using a basis to manipulate:

  


Please note that this filter would not accomplish what we want. The SQL syntax from the picture above is:

HEADER_HOST in ('Switch1', 'Switch2') and MSG_CONTENT LIKE '%Uplink%'

The static first part of the query, SELECT * FROM SYSLOG WHERE, is left out for readability. To modify the query, we insert a 'NOT' to show that we do not want the entries with the text Uplink to be shown:

HEADER_HOST in ('Switch1', 'Switch2') and MSG_CONTENT NOT LIKE '%Uplink%'

Next we manually add another keyword that is not to be allowed through the filter. We copy and paste a large portion of what is already there:

HEADER_HOST in ('Switch1', 'Switch2') and MSG_CONTENT NOT LIKE '%Uplink%' and MSG_CONTENT NOT LIKE '%Downlink%'

This filter does what we want: Show all entries from Switch1 and Switch2 that does not contain the words Uplink or Downlink.

Next: Advanced filter design, continued

Contents:
1. Introduction
2. Using filters
3. Basic filter design
4. Basic filter design, continued
5. Alarms are similar to filters
6. Using filter groups
7. Advanced filter design
8. Advanced filter design, continued
9. Conclusion
© 2008 Datagram Consulting Sweden. All rights reserved.