Dell 6.2 Understanding th e ESI Syslog Parser

Figure 344: LoadBalancing Groups
Understanding th e ESI Syslog Parser
The ESI syslog parser adds a UNIX-style regular expression engine forparsing relevant fields in messages from third-
party appliances suchas anti-virus gateways, content filters, and intrusion detection systems.
The usercreates a list of rulest hat identify the type of message, the username to which this message pertains, and
the action to be taken when there is a match on the co ndition.
ESI Parser D omains
The ESI servers areconfigured into ESI parser domains (see Figure 345) to which the ruleswi llbe applied. This
condition ensures that only messages coming from configured ESI parser domains are accepted, and reduces the
numberof rules that must be examined before a match is detected ("SyslogP arserRules" on page 751 ).
messages.Whena syslog message is received, it is checked against the list of defined ESI servers. If a servermatch i s
found,the message is then tested against the list of predefined rules.
Figure 345: ESI Parser Domains
DellPowerConnect W- Series ArubaOS 6.2 | UserGuide ExternalServicesInter face |750