Users Guide

582 | External Services Interface Dell PowerConnect ArubaOS 5.0 | [User Guide
The test results are displayed in a box in the area below the Test button. The test results contain
information about the matching rule and match pattern.
In the CLI
Use these CLI commands to manage syslog parser rules.
Adding a new parser rule
esi parser rule rule-name
condition expression
domain name
enable
match {ipaddr expression | mac expression | user expression}
position position
set {blacklist | role role}
For example:
esi parser rule forti_virus
condition “log_id=[0-9]{10}[ ]”
match “src=(.*)[ ]”
set blacklist
enable
Showing ESI syslog parser rule information:
show esi parser rules
Deleting a syslog parser rule:
no esi parser rule rule-name
Editing an existing syslog parser rule
esi parser rule rule-name
condition expression
domain name
enable
match {ipaddr expression | mac expression | user expression}
no
position position
set {blacklist | role role}
Testing a parser rule
esi parser rule rule-name
test {file filename | msg message}
Monitoring Syslog Parser Statistics
The following sections describe how to monitor syslog parser statistics using the WebUI and CLI.
In the WebUI
You can monitor syslog parser statistics in the External Servers monitoring page, accessed by selecting
Monitoring > Switch > External Services Interface > Syslog Parser Statistics.
The Syslog Parser Statistics view displays statistics such as the number of matches and number of users per rule,
as well as the number of respective actions fired by the syslog parser.
Note: The Syslog Parser Statistics view also displays the last refresh time stamp and includes a Refresh Now button, to allow the
statistics information to be refreshed manually. There is no automatic refresh on this page.