Add/Modify/Copy Syslog Template
An syslog template is the text content for matching an alarm generation rule. A system log is considered as matching the alarm generation rule only if the content of the log completely matches the content of the syslog template of the alarm generation rule. This function allows you to add, modify or copy syslog templates.
Operation Procedure
- Select the Alarm tab, and then select Syslog Management > Syslog Template from the navigation tree to enter the Rule List page.
- Click Add, and then click the
link corresponding to the rule to be modified, or click the 
link corresponding to the rule to be copied to enter the add/modify/copy syslog template page.
- Input the template name, content and description.
- Click OK.
Precautions
- You cannot modify the template name when modifying an syslog template.
- You must modify the template name when copying an syslog template.
- You can input the match content without any parameter, for example, -IP address IP collision detected. You cannot use the dollar sign "$" in the content.
- You can input the match content with parameters, which are in the format of $(parameter name), for example, Duplicate address $(Duplicate IP) on $(Source VLAN). A parameter cannot include the $ sign, left parenthesis ((), right parenthesis ()), asterisk (*), left brace ({), right brace (}), left angle bracket (<) or right angle bracket (>). In addition, no carriage return or line feed character is allowed in a parameter. A match content cannot include identical parameters, and at least one visible character must be placed between two parameters.
- The space preceding or following a parameter is ignored, that is, $ (parameter name) and $(parameter name) are considered identical.
- When the template content uses the regular expression, define the parameters contained in the match text of the template content by using the regular expression grouping of parentheses (()), and then customize the parameter names. If the template contains parentheses but does not regard them as parameters, use escape characters of the backslash (\), for example, enter the match text of "Duplicate \(IP\)address (.+) on (.+)" for "Duplicate (IP)address (.+) on (.+)".
Related Topics