Example: Using Nonstandard System Log Messages to Trigger an Event Policy
Reference a KERNEL system log message in an event policy. The raise-trap action in the then statement is executed only if a KERNEL event containing a message that matches "exited on signal 11" occurs.
[edit event-options]
policy kernel-policy {
events KERNEL;
attributes-match {
KERNEL.message matches "exited on signal 11";
}
then {
raise-trap;
}
}