[Contents]
[Prev]
[Next]
[Index]
[Report an Error]
Ignoring Events Based on Receipt of Other Events
In the following policy, if event1, event2, or event3 has been received, and either event4 or event5 has been received within
the last 600 seconds, and event6 has
not been received within the last 800 seconds, then the event that
triggered the policy (event1, event2, or event3)
is ignored, meaning system log messages are not created.
event-options {
policy 1 {
events [ event1 event2 event3 ];
within 600 events [ event4 event5 ];
within 800 not events event6;
then {
ignore;
}
}
}
[Contents]
[Prev]
[Next]
[Index]
[Report an Error]
