EMS Manual

EMS Components and Architecture
EMS Manual—426909-005
2-12
Filter Tables
specifications of the EMF language and the filter compiler, see The Filter Language on
page 5-7 and The Filter Compiler on page 5-44.
Filter Tables
Filter tables are EDIT files you load into a collector or distributor, at which time the
table is automatically converted to an object representation that is then evaluated for
each event by a collector or distributor. For a detailed description of filter tables, see
Filter Tables on page 6-1.
Burst Filters
Burst filters are filter tables that contain burst detection and suppression (BDS)
configuration parameters. These parameter directives are saved in an EDIT file, which
the collector or distributor converts to a filter object like they do for standard filter
tables. When you add a burst filter to a collector or distributor, as a startup parameter
or through the SPI ADD command, all event bursts that conform to the BDS
configuration parameter values in the filter are suppressed. For details, see Burst
Filters on page 6-7.
Compared to compiled filters, filter tables (including burst filters) simplify the process of
filter installation and modification. You can use filter tables instead of or combined with
compiled filters. Because a compile step is not required, they are easier to maintain.
Filter tables are especially useful when you need to filter events by relatively simple
criteria (for example, subsystem owner, subsystem ID, and event number) or when you
need frequent and fast online updates of filter contents.
To make a filter for a collector or distributor, create an EDIT file containing the filter-
language constructs that express your selection criteria. For a compiled filter, you then
use the filter-language compiler (EMF) to generate an object file suitable for loading to
the collector or distributor. After the filter specification is loaded, the collector or
distributor uses it to decide whether to pass each event message to its destination. The
EMF compiler does not compile filter tables and burst filters. The collector or distributor
converts them when they are loaded.
Text Formatting Tools
When passed an event message, the EMSTEXT procedure returns text in DSM display
format. For parameter definitions and syntax, see EMSTEXT Procedure
on
page 15-19.
EMSTEXT performs these steps when it generates text for an event message:
1. If the event message points to a format template or contains a TEXT token:
a. EMSTEXT checks first for a template.
For many HP and user-written subsystems, EMSTEXT generates display text
from an event message by applying a format template found in a template file
installed at system generation. The subsystem ID and event number of the