Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 7

Orion Syslog filters

I am trying to filter pattern "LINEPROTO-5-UPDOWN" and "changed state to down" on the same line of the message. There are other few words in between these two patterns which will always be differing.

I used Regular Expression as below

LINEPROTO-5-UPDOWN.*changed state to down

but it does not work

Can anybody suggest, what should be filter message pattern

0 Kudos
2 Replies
Level 14

This doesn't really require a regex.  LINEPROTO-5-UPDOWN should actually be entered in the "Message Type Pattern" field, and you can put *changed state to down* in the Syslog Message Pattern.

0 Kudos

Thanks it worked

0 Kudos