Users Guide

730 | External Services Interface Dell PowerConnect W-Series ArubaOS 6.1 | User Guide
Editing an existing syslog parser rule
esi parser rule rule-name
condition expression
domain name
enable
match {ipaddr expression | mac expression | user expression}
no
position position
set {blacklist | role role}
Testing a parser rule
esi parser rule rule-name
test {file filename | msg message}
Monitoring Syslog Parser Statistics
The following sections describe how to monitor syslog parser statistics using the WebUI and CLI.
In the WebUI
You can monitor syslog parser statistics in the External Servers monitoring page, accessed by selecting
Monitoring > Switch > External Services Interface > Syslog Parser Statistics.
The Syslog Parser Statistics view displays statistics such as the number of matches and number of users per rule,
as well as the number of respective actions fired by the syslog parser.
In the CLI
show esi parser stats
Example Route-mode ESI Topology
This section introduces the configuration for a sample route-mode topology using the controller and Fortinet
Anti-Virus gateways. In route mode, the trusted and untrusted interfaces between the controller and the Fortinet
gateways are on different subnets. The following figure shows an example route-mode topology.
NOTE: The Syslog Parser Statistics view also displays the last refresh time stamp and includes a Refresh Now button, to allow the
statistics information to be refreshed manually. There is no automatic refresh on this page.
NOTE: ESI with Fortinet Anti-Virus gateways is supported only in route mode.