EMS Manual

Distributor Commands and Responses
EMS Manual—426909-005
17-22
CONTROL Command (ZEMS-CMD-CONTROL)
Specifying Event-Message Sources
At any particular time, the distributor gets event messages from either—but not both—
of these event-message sources:

Specified collectors. The distributor gets its messages from the current log files of
one or more collectors that you specify (see ZEMS-TKN-CONNECT-SRC-COLL
and ZEMS-TKN-DISCONNECT-SRC-COLL). The distributor reads event
messages from collector log files, proceeding from one log file to the next as
appropriate.
The distributor merges the event messages from the collectors by log time if more
than one collector is specified.
You must use ZEMS-TKN-DISCONNECT-LOG to disconnect any saved log file
before you specify any collector as an event-message source.

A specified log file. The distributor gets its messages from the log file that you
specify with ZEMS-TKN-CONNECT-LOG. You can specify a log file that has been
saved or one of several log files belonging to a collector.
You must use ZEMS-TKN-DISCONNECT-SRC-COLL to disconnect all collectors
as event-message sources before you specify a log file as an event-message
source.
For token definitions, see CONTROL Command (ZEMS-CMD-CONTROL) on
page 17-17
Positioning Within Event-Message Sources
To examine past event messages, you can use the ZEMS-TKN-GMTTIME and
ZEMS-TKN-LOGTIME tokens to position the distributor—within a collector or log file
source—at the earliest event message of interest. Subsequently, the distributor
examines consecutive event messages from the specified position onward.
You can use ZEMS-TKN-GMTTIME to specify the time the event messages were
generated or use ZEMS-TKN-LOGTIME to specify the time the event messages were
logged. (Event messages are saved on a log file as they are received and are only
approximately in order by generation time). With either ZEMS-TKN-GMTTIME or
ZEMS-TKN-LOGTIME, the distributor positions itself at the first event message that is
at (or after) the time you specify.
If specified collectors are the event-message sources, you can direct the distributor to
examine messages as they are logged by the specified collectors rather than
positioning the distributor by time. If never positioned by time, the distributor examines
event messages as logged. Once positioned by time, you can reset the distributor to
Note. For new applications, HP strongly advises using the distributor’s extended
programmatic interface commands (ZCOM-ADD, -ALTER, -DELETE) instead of the basic SPI
ZEMS- commands in all situations.