Users Guide

580 | External Services Interface Dell PowerConnect ArubaOS 5.0 | [User Guide
For example (based on the example shown in Figure 123 on page 573):
esi parser domain forti_domain
server 30.0.0.1
server 30.0.0.2
server 30.0.0.3
peer 20.0.0.1
Managing Syslog Parser Rules
The following sections describe how to manage syslog parser domains using the WebUI and CLI.
In the WebUI
Click on the Syslog Parser Rules tab to display the Syslog Parser Rules view.This view displays a table of rules with
the following columns:
z Name— rule name
z Ena—where “y” indicates the rule is enabled and “n” indicates the rule is disabled (not enabled)
z Condition—Match condition (a regular expression)
z Match—Match type (IP address, MAC address, or user)
z User—Match pattern (a regular expression)
z Set—Set type (blacklist or role)
z Value—Set value (role name)
z Domain—Parser domain to which this rule is to be applied
z Actions—The actions that can be performed on each rule.
Adding a new parser rule
To add a new syslog parser rule:
1. Click Add in the Syslog Parser Rules view. The system displays the new rule view.
1. In the Rule Name text box, type the name of the rule you want to add.
2. Click the Enable checkbox to enable the rule.
3. In the Condition Pattern text box, type the regular expression to be used as the condition pattern.
For example, “log_id=[0–9]{10}[ ]” to search for and match a 10-digit string preceded by “log_id=” and
followed by one space.
4. In the drop-down Match list, use the drop-down menu to select the match type (ipaddr, mac, or user).
5. In the Match Pattern text box, type the regular expression to be used as the match pattern.
For example, if you selected “mac” as the match type, type the regular expression to be used as the match
pattern. You could use “mac[ ](.{17})” to search for and match a 17-character MAC address preceded by the
word “mac” plus one space.
6. In the drop-down Set list, select the set type (blacklist or role).
When you select role as the Set type, the system displays a second drop-down list. Click the list to display the
possible choices and select the appropriate role value. Validation on the entered value will be based on the Set
selection.
7. In the drop-down Parser Group list, select one of the configured parser domain names.