evmget(1)

NAME

evmget — retrieve stored events

SYNOPSIS

evmget [-A [-t show_template]] [-e] [-f filter_expr] [-s sort_spec] [-C channel-list]

DESCRIPTION

The evmget command retrieves stored events and outputs them to stdout as EVM events. Events are obtained from a configured set of log files and event channels, using channel-specific retrieval functions as specified in the channel configuration file, /etc/evmchannel.conf.

If the -A option is specified, evmget automatically starts evmsort -A and pipes the event stream into it, producing a sorted and formatted display of events. If the show_template or sort_spec arguments are supplied, these strings are passed to evmsort through its own -t and -s options. See evmsort(1) and evmshow(1) for more information.

To review events that are available from a particular set of event channels (for example, an event channel that retrieves events from application logfiles), use the -C option to specify the channels to be searched. This may reduce the overall retrieval time, as it avoids the need to search channels in which you have no interest.

If a channel does not have an fn_get keyword defined in its channel configuration, then no events are returned for that channel.

A channel-list is a list of one or more channel names, separated either by commas, or if the list is enclosed in quotes, by space or tab characters. Supply multiple channel lists by specifying the -C option more than once. Use the evminfo -lc command to see a list of configured channels.

Because events may be retrieved from more than one source, there is no guarantee that they returned in any particular order, unless the -A option is used or the output event stream is piped through evmsort.

Options

-A: Automatically starts evmsort -A to produce a sorted and formatted display of the retrieved events.
-e: Terminates after validating the supplied command operands. This feature can be used to check the syntax of a filter expression.
-f filter_expr: Outputs only events that match the filter_expr. See EvmFilter(5) for the syntax of filter_expr.
-t show_template: Template string to be passed to evmsort if the -A option is also specified. If the -A option is not specified, this argument is ignored. See evmshow(1) for a description of the template string.
-s sort_spec: Sort specification string to be passed to evmsort if the -A option is also specified. If the -A option is not specified, this argument is ignored. See evmsort(1) for a description of the sort specification.
-C channel-list: Specifies that events should be retrieved only from channels whose names are included in the channel-list. Refer to the DESCRIPTION section for more details of this option and the syntax of the channel-list.

RETURN VALUES

The following exit values are returned:

0: Successful completion.
not 0: An error occurred.

EXAMPLES

The following example uses evmget to retrieve events, automatically piping the events through evmsort and evmshow to produce a sorted and formatted list of events.
evmget -A
In the following example, all available events are retrieved and piped to evmsort and evmshow for sorting and formatting. The events are sorted into the default timestamp order, and displayed with the timestamp at the start of each line.
evmget -A -t "@timestamp @@"
In this example, only events from the my_log channel are retrieved. The events are further filtered to display only messages from the EVM daemon's logfile.

evmget -A -C my_log -f "[name *.evmdaemon]" -t "@timestamp @@" 

This example retrieves only events that have a priority value of at least 500. The raw events are sorted into descending timestamp order and stored in a file.

evmget -f "[priority >= 500]" \ 
| evmsort -s @timestamp- > my_eventfile 

This example uses a stored filter to retrieve all EVM events, sorts them into ascending timestamp order (the default order), and displays them.

evmget -f "@sys:evm" | evmsort | evmshow -t "@timestamp  @@" 

This ksh example uses the environment variables EVM_SORT_SPEC to set the sort preference and EVM_SHOW_TEMPLATE to set the preferred display style and format for the evmget output.

export EVM_SORT_SPEC="@priority" 
export EVM_SHOW_TEMPLATE="@timestamp @@" 
evmget | evmsort -A  

WARNINGS

The evmget command retrieves only events for which the user has access authorization. See evm.auth(4) for details of access authorization.

The evmget command rejects attempts to output raw events to a terminal device.

FILES

/etc/evmchannel.conf: Location of the EVM channel configuration file
/etc/evmdaemon.conf: Location of the EVM daemon configuration file
/etc/services: Definition of the sockets and protocols used for Internet services

evmget(1)

Technical documentation

» Table of Contents

» Index

NAME

SYNOPSIS

DESCRIPTION

Options

RETURN VALUES

EXAMPLES

WARNINGS

FILES

SEE ALSO

Commands

Files

Event Management

EVM Events

Event Filter