Installing › How to Install and Configure the CA SDM and CA NSM Integration › Verify the Post-Integration Considerations › Filter Rule Considerations › Event Writer Rule Definitions › Syntax (Event Writer Rules)

Syntax (Event Writer Rules)

The event writer rule syntax is:

event_ID:::device:::user_ID:::majorSrc:::minorSrc:::action:::template:::
command:::logging:::event_token:::user_parms

where:

Fields in the rule are separated by three colons (:::). You can use an asterisk (*) as a wildcard character, which means the value of the parameter is ignored when determining matches for the event writer rule.