Administrator Guide

1095 | External Services Interface Dell Networking W-Series ArubaOS 6.4.x| User Guide
Adding a new syslog parser domain
esiparserdomainname
peerpeer-ip
serveripaddr
Showing ESI syslog parser domain information
showesiparserdomains
Deleting an existing syslog parser domain
noesiparserdomainname
Editing an existing syslog parser domain
esiparserdomainname
no
peerpeer-ip
serveripaddr
Managing Syslog Parser Rules
The following sections describe how to manage syslog parser rules using the WebUI and CLI.
In the WebUI
Click on the Syslog Parser Rules tab to display the Syslog Parser Rules view.This view displays a table of rules
with the following columns:
l Name— rule name
l Ena—where “y” indicates the rule is enabled and “n” indicates the rule is disabled (not enabled)
l Condition—Match condition (a regular expression)
l Match—Match type (IP address, MAC address, or user)
l User—Match pattern (a regular expression)
l Set—Set type (blacklist or role)
l Value—Set value (role name)
l Domain—Parser domain to which this rule is to be applied
l Actions—The actions that can be performed on each rule.
Adding a new parser rule
To add a new syslog parser rule:
1. Click Add in the SyslogParser Rules view. The system displays the new rule view.
1. In the Rule Name text box, type the name of the rule you want to add.
2. Click the Enable checkbox to enable the rule.
3. In the Condition Pattern text box, type the regular expression to be used as the condition pattern.
For example, “log_id=[0–9]{10}[]” to search for and match a 10-digit string preceded by “log_id=” and
followed by one space.
4. In the drop-down Match list, use the drop-down menu to select the match type (ipaddr, mac, or user).
5. In the Match Pattern text box, type the regular expression to be used as the match pattern.
For example, if you selected “mac” as the match type, type the regular expression to be used as the match
pattern. You could use “mac[](.{17})” to search for and match a 17-character MAC address preceded by the
word “mac” plus one space.
6. In the drop-down Set list, select the set type (blacklist or role).