| T.R | Title | User | Personal Name
 | Date | Lines | 
|---|
| 1239.1 |  | CSC32::BUTTERWORTH | Gun Control is a steady hand. | Thu Mar 14 1996 18:54 | 4 | 
|  |     Please post your filter definition so we can see how it's setup.
    
    Regs,
      Dan
 | 
| 1239.2 | I discovered part of the problem... | 34129::FLACK | Swap read error. You lose your mind. | Thu Mar 14 1996 20:58 | 62 | 
|  |     Dan,
    
    I knew I must have been doing something dumb...
    Doing some more testing just a little while ago, I found that the event
    I had defined no longer had the class and subsystem I had assigned
    (maybe I forgot to save before a reconfigure or something).  By adding
    these itesm to the event I am now able to get the window to work with
    my test event.  I am still unsure about why I still see the reconfigure
    events though.  I think I must not understand how the ENS filters work.
    I had assumed that if I specified a particular event and systems and
    leave all other filter fields at default of all, that I would only see
    the particular event on those systems no matter what the priority, etc.
    But if I specify my test event and the two 8400 systems for the filter
    section (and leave other items at all), I still see the reconfigure
    events.  I also am not sure why yesterday I was not seeing my test
    event with this configuration (which is what led me to specify the
    class, subsystem, etc).  How do I set these fields so that I only see
    my test event, do I set all filter fields to not-all and then only add
    a selection for the particular event (so that all other fields are
    effectively blank) or do I have to specify all of the filter fields?
    
    Also, why does the log file look like it does, is this normal?  Even
    now when the filter seems to be working, the data in the log file still
    seems to be useless.  What is the purpose of this format for log file
    output?
    
    Anyway, here is the filter I am now using that does display my test
    event and also displays the reconfigure events (which I don't want):
    
    Filter Name      = bw_test_filter
        Information =
        Interval = 20 seconds
        Event Interval = 20 seconds
        Filter 1 events
          bw_test    This is a test event to test ENS
        Filter all classes
        Filter 2 systems
          apache    8400 apache console
          navajo    8400 navajo console
        Filter all Subsystems
        Filter all groups (4)
        Notify regardless of event priority
        Actions: (2)
          Action 1: Mail    Mail an event to a User
            Information : Mail test of filter
            Schedule:
                Run at any hour on any day
            User data passed to action:
                root
    
          Action 2: Single-Shot Window    One event in one window
            Information : This is a test event and dispatch
            Schedule:
                Run at any hour on any day
            User data passed to action:
                hopi 0 0 tcpip 00:10:00
    
    The only other filter defined on the system is the default Archive
    directory cleanup.
    
    Thanks for your help,
    Peter
 | 
| 1239.3 |  | CSC32::BUTTERWORTH | Gun Control is a steady hand. | Fri Mar 15 1996 15:31 | 65 | 
|  | >			How do I set these fields so that I only see
>    my test event, do I set all filter fields to not-all and then only add
>    a selection for the particular event (so that all other fields are
>    effectively blank) or do I have to specify all of the filter fields?
    
    You've basically hit the nail on the head. The following is some 
    pseudo-code that illustrates the logic used by filters:
    
    IF ((EVENT .OR. CLASS) .AND. (SYSTEM .OR. GROUP) .AND. SUBSYSTEM .AND.
       PRIORITY) THEN do actions
    
    The important thing to note is the ORing of EVENT with CLASS. If you 
    deselect Filter all Events but leave Filter ALl Classes set the
    the test for EVENT .OR. CLASS evaluates to TRUE. This is also true
    when there are no classes define or if the event isn't part of a class.
    This is because the NULL class is mathematically part of *ALL* classes.
    
    Deselect the FILTER ALL CLASSES button, save and reconfigure and you'll
    be all set.
    
    Regs,
      Dan
    
    
    Also, why does the log file look like it does, is this normal?  Even
    now when the filter seems to be working, the data in the log file still
    seems to be useless.  What is the purpose of this format for log file
    output?
    
    Anyway, here is the filter I am now using that does display my test
    event and also displays the reconfigure events (which I don't want):
    
    Filter Name      = bw_test_filter
        Information =
        Interval = 20 seconds
        Event Interval = 20 seconds
        Filter 1 events
          bw_test    This is a test event to test ENS
        Filter all classes
        Filter 2 systems
          apache    8400 apache console
          navajo    8400 navajo console
        Filter all Subsystems
        Filter all groups (4)
        Notify regardless of event priority
        Actions: (2)
          Action 1: Mail    Mail an event to a User
            Information : Mail test of filter
            Schedule:
                Run at any hour on any day
            User data passed to action:
                root
    
          Action 2: Single-Shot Window    One event in one window
            Information : This is a test event and dispatch
            Schedule:
                Run at any hour on any day
            User data passed to action:
                hopi 0 0 tcpip 00:10:00
    
    The only other filter defined on the system is the default Archive
    directory cleanup.
    
    Thanks for your help,
    Peter
 | 
| 1239.4 | Aaahh, no wonder I couldn't figure it out! | 34129::FLACK | Swap read error. You lose your mind. | Tue Mar 19 1996 11:23 | 15 | 
|  |     Dan,
    
    Thanks for the info on the filtering w/classes and events.  This logic
    should be well documented in the manuals!!  It was very frustrating
    trying to determine the logic for when I was and was not getting events
    from ENS - and I wasted several hours simply because the logic is a
    mixture of AND and OR between the filter fields that is not easy to
    determine from trial and error.
    
    Also, you still haven't answered the questions about the ENS log
    file... is it normal or not and if it is normal, what is the use of the
    data?
    
    Thanks,
    Peter
 | 
| 1239.5 |  | CSC32::BUTTERWORTH | Gun Control is a steady hand. | Wed Mar 20 1996 14:36 | 12 | 
|  |     > Also, you still haven't answered the questions about the ENS log
    >file... is it normal or not and if it is normal, what is the use of
    >the data?
    
    I reread the base note and whats in there is definitely useless!!
    Without the debugging logical turned on, very littel data is placed in
    any of the daemon logfiles. If you want good ENS debugging info then 
    define the environment variable CONSOLE_DEBUG to ENS. Export it and
    restart PCM.
    
    Regs,
      Dan
 | 
| 1239.6 | Thanks, I will try it out | 34129::FLACK | Swap read error. You lose your mind. | Wed Mar 20 1996 20:45 | 1 | 
|  |     
 |