EMS Manual

Configuring EMS
EMS Manual426909-005
12-11
Log Files
Running primary or alternate collector—dynamically using the FILTER (PLF) and
SUPPRESS (BDS) keyword parameters of the EMSCCTRL program
New alternate collector—using the SUPPRESS and FILTER keyword parameters
of the EMSACOLL program
Using the appropriate collector command (ZCOM-CMD-ADD, ZCOM-CMD-
DELETE, ZEMS-CMD-REPLACE) to add, delete, or replace a pre-log filter or burst
filter
FILTER
This attribute identifies the current state of pre-log filtration (PLF) for the collector. Pre-
log filtration is the use of collector filters to detect and discard specified event
messages or event bursts that would otherwise be sent to and stored in the collector’s
log files. The filters can be a combination of compiled filters, filter tables, and one burst
filter. You can add filters to a collector by using:
The FILTER keyword of the EMSCCTRL program for primary or alternate
collectors
The EMSACOLL program for alternate collectors only
The appropriate collector SPI command (ADD, REPLACE, or DELETE)
When filters are present and the FILTER attribute is set to ON, PLF is enabled for that
collector; OFF indicates that PLF is disabled. RESET disables PLF and causes the
collector to delete any previously entered filters. For a detailed description of the
FILTER keyword, see EMSCCTRL—Control Collector Utility on page 13-9.
SUPPRESS
This attribute sets BDS configuration values for the collector and the state of BDS (ON
or OFF). If SUPPRESS is set to ON, the BDS configuration values supplied from the
EMSCCTRL program for primary and alternate collectors or the EMSACOLL program
for alternate collectors specify the number and time duration of repetitive similar events
that are suppressed from reaching the collectors log files. If SUPPRESS is set to OFF,
the BDS configuration values can instead be implemented by means of a burst filter
specified in the FILTER keyword of EMSCCTRL or EMSACOLL, or installed with an
SPI ADD or REPLACE command (see FILTER
on page 12-11).
When SUPPRESS is set to ON, BDS is enabled for that collector. When SUPPRESS is
set to OFF, BDS is disabled unless a burst filter is active. SUPPRESS RESET disables
BDS and causes the collector to adopt the default BDS configuration values described
in Section 7, Burst Detection and Suppression. For a description of the manner in
which this information is stored in the ZEMS-EVT-FILESWITCH event message, see
BDS and PLF Information in the FILESWITCH Event on page 12-24.