Dell 6.2 Adding a new parser rule, Deleting a syslog parser rule, Editing an existing sysl og parserrule

In the WebUI
Click on the Syslog Parser Rules tab to dis playt he Syslog Parser Rulesvi ew.This view displays a table of rules with
the followingco lumns:
lName— rulename
lEna—where“y” indicates the rulei s enabledand “n” indicates the rule is disabled (not enabled)
lCondition—Match condition (a regular expression)
lMatch—Matcht ype (IP address, MAC address, or user)
lUser—Matchpatt ern(a regular expression)
lSet—Set type (blacklist or role)
lValue—Setvalue (role name)
lDomain—Parser domaint o whicht hisrule is to be applied
lActions—The actions that can be performed on each rule.
Adding a new parser rule
To add a new syslog parser rule:
1. Click Add in the SyslogParser Rules view. The system displays the new rule view.
1. In the Rule Name text box, type the name of the rule you want to add.
2. Click the Enable checkbox to enable the rule.
3. In the Condition Patter n textbo x,type t heregular expression to be used as the condition pattern.
For example,“log_id=[0–9 ]{10}[]”to searchfor and match a 1 0-digit string preceded by “log_id=” and
followedby o nes pace.
4. In the drop-down Match list, use the drop-down menu to select the match type (ipaddr, mac, or user).
5. In the Match Patt ern text box, type the regularexpression to be used as the match pattern.
For example,if you selected “mac” as the match type, type the regular expression to be used as the match
pattern.You coulduse “mac[](.{17})” to search for and match a 17-character MAC address preceded by the
word “mac” plus one space.
6. In the drop-down Set list, select the set type (blacklist or role).
Whenyou select r ole as the Set type, the system displays a second drop-down list. Clickt helist to display the
possible choices and select the appropriaterole value. Validation on the entered value will be basedo nt heSet
selection.
7. In the drop-down Parser Group list, select one of the configured parser domain names.
Deleting a syslog parser rule
To delete an existing syslog parser rule:
1. Identify the target parser rule in the list shown in the SyslogParserRules view.
2. Click Delete on the same row in the Act ions column.
Editing an existing sysl og parserrule
To change an existing syslog parser rule:
1. Identify the target parser rule in the list shown in the SyslogParserRules view.
2. Click Edit on the same row in the Actions column. The system displays the attributes for the selected rule
NOTE:You cannot modi fythe rule name w hen editing a parser rule.
DellPowerConnect W- Series ArubaOS 6.2 | UserGuide ExternalServicesInter face |758