7.6.5 Predefined filter
A predefined filter filters the log files and event logs acquired from the remotely monitored hosts. If you set such a filter, only the log files and event logs that match the specified conditions are transferred to the server, so you can control the amount of transferred data.
If no filter is set, more data than can be monitored in an action definition file might be collected from the monitored server. If this occurs, the maximum size of data that can be collected during the collection period might be exceeded and a warning might appear when the file is trapped. In cases such as this, consider whether you can use a predefined filter.
The following profiles can be filtered by predefined filters.
-
Remote-monitoring log file traps when an SSH connection is used
-
Remote-monitoring event log traps when a WMI/NetBIOS (NetBIOS over TCP/IP) connection is used
You can set predefined filters in the Display/Edit Profiles window or using the -filter option of a command for remote monitoring (jcfallogstart, jcfallogdef, jcfaleltstart, and jcfaleltdef). The settings are applied when a remote-monitoring log file trap or remote-monitoring event log trap is started. For details, see the following:
-
Display/Edit Profiles window
5.9 Display/Edit Profiles window in the manual JP1/Integrated Management 2 - Manager GUI Reference
-
Jcfallogstart command
jcfallogstart in Chapter 1. Commands in the manual JP1/Integrated Management 2 - Manager Command, Definition File and API Reference
-
Jcfallogdef command
jcfallogdef in Chapter 1. Commands in the manual JP1/Integrated Management 2 - Manager Command, Definition File and API Reference
-
Jcfaleltstart command
jcfaleltstart (Windows only) in Chapter 1. Commands in the manual JP1/Integrated Management 2 - Manager Command, Definition File and API Reference
-
Jcfaleltdef command
jcfaleltdef (Windows only) in Chapter 1. Commands in the manual JP1/Integrated Management 2 - Manager Command, Definition File and API Reference