It is possible to modify the current message filter file during operation using the Console Monitor application by setting the consMonMsgfilter object.
If the consMonMsgFilter file contains syntax errors, processing continues with the original message filter file.
Changing the current message filter or the current negative message filter is also possible by sending a SIGHUP signal to the application.
Example sending a SIGHUP: kill -1 <pid> pid - agent process id
After sending a SIGHUP signal to the application, the configuration will be reloaded from the current message filter and the current negative message filter.
The current message filter can be checked by getting consMonMsgFilter , for example:
snmpget -v2c -cpublic SNMP_ADDR consMonMsgFilter.0
The current negative message filter can be checked by getting consMonNegMsgFilter object, for example:
snmpget -v2c -cpublic SNMP_ADDR consMonNegMsgFilter.0
Example: filtering console messages
The message EXC0858 should only be sent to the management platform if it contains neither the string "CLAQ" nor the string "TEST". The trap should be sent with the trap number 99 and have "Hardware" entered as its source.
This is done as follows:
In the positive message filter, enter:
<EXC0858 99 SOURCE=Hardware>In the negative message filter, enter:
<EXC0858 PATTERN =/*CLAQ*/*TEST*>