Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
HP-UX Reference > E

evweb_eventviewer(1)

HP-UX 11i Version 3: February 2007
» 

Technical documentation

» Feedback
Content starts here

 » Table of Contents

 » Index

NAME

evweb_eventviewer — enables you to view and delete events

SYNOPSIS

evweb eventviewer

  • {-D [ -a|-e|-f|-h|-i|-n|-r|-t|-v ] }

  • {-E [ -h|-n ] }

  • {-L [ -a|-e|-h|-i|-o|-r|-s|-t|-v ] }

DESCRIPTION

The evweb eventviewer command is used to list the event summary (-L), display details of an event (-E), or to delete an event (-D).

The options -D, -E, and -L are mutually exclusive. These options can be used with other switches such as -a, -b, -e, -f, -h, -i, -n, -o, -r, -s, and -v.

Options

The evweb eventviewer command supports the following options:

-a age_number[:]{yy|mm|dd|hh}

Specifies the age of an event. The age consists of a number and the unit of age. The possible values for unit are:

yy

years

mm

months

dd

days

hh

hours

Specify an argument (a number followed by its unit) for the -a switch. The number and its unit must be separated using a colon. If you do not use the colon, specify the complete argument within double quotes. Following are the examples of the -a option:

  • -a 1:mm

The following two commands have the same meaning:

  • -a 10:dd

  • -a "10 dd"

-D

Deletes an event. Use the -D option to delete one or more events from the Event Archive. You can use the following switches with the -D option:

  • -a age_number[:]{yy|mm|dd|hh}

  • -e [eq|ne|le|ge|bw]:severity_level1[,severity_level2]

  • -f

  • -h

  • -i Event_IDs

  • -n [Event_Numbers]

  • -r [is|be|en|co][:]search_string

  • -t [eq|le|ge|bw]:mm:dd:yyyy:hh:mi:ss[,mm:dd:yyyy:hh:mi:ss]

  • -v Event_categories

Following are the examples of the -D options:

  • evweb eventviewer -D -e eq:4 -a 5:dd

  • evweb eventviewer -D

  • evweb eventviewer -D -n 1234,1235,1236

  • evweb eventviewer -D -h

-e [eq|ne|le|ge|bw]:severity_level1[,severity_level2]

Specifies the severity as a part of the events archive search criteria, for either viewing the summary list of events, or for deleting events.

Severity is represented by an operator followed by the severity values. The : demarcates the operator and the severity values. The following operators can be used:

eq

equal to (default)

ne

not equal to

le

less than or equal to

ge

greater than or equal to

bw

between

The default value of operator is eq. You must use only one operator at a time.

To use the bw operator, you must specify the lower and upper severity levels. For all other operators, you must specify only one severity level.

The severity level ranges from 0 to 7, where 0 is least severe and 7 is most severe. Following lists the severity levels in ascending order of severity:

0

Unknown

1

Normal

2

Other

3

Information

4

Warning

5

Minor

6

Major

7

Critical

Use a colon to separate an operator and a severity level. Use a comma to separate two severity levels.

You can also use a space to separate an operator and a severity level. However, in this case, you should enclose the operator and severity values within double quotes.

You must specify only one -e switch in a command. Following are the examples of the -e option:

  • -e ne:2

The following two commands have the same meaning:

  • -e bw:2,5

  • -e "bw 2,5"

The following three commands have the same meaning:

  • -e eq:4

  • -e "eq 4"

  • -e 4

-E

Displays the details of an event identified by an event number. You can use the following switches with the -E option:

  • -n [Event_Numbers]

  • -h

Following are the examples of the -E option:

  • evweb eventviewer -E -n 1234

  • evweb eventviewer -E -h

-f

Forces the command without asking for a confirmation. You can use -f switch only with the -D option. Following are the examples of the -f option:

  • evweb eventviewer -D -n 1234 -f

-h

Displays how to use the evweb eventviewer command. Following are the examples of the -h option:

  • evweb eventviewer -h

-i Event_IDs

Specifies one or more Event IDs. Use this option as a part of the subscription criteria. You cannot use this switch more than once in a command. Following are the examples of the -i option:

  • -i 1234

  • -i 123,124,125

-L

Displays a list of events and their summary. The summary is extracted from the Event Archive based on the search criteria. You can use the following switches with the -L option:

  • -e [eq|ne|le|ge|bw]:severity_level1[,severity_level2]

  • -v Event_categories

  • -i Event_IDs

  • -r [is|be|en|co][:]search_string

  • -a age_number[:]{yy|mm|dd|hh}

  • -t [eq|le|ge|bw]:mm:dd:yyyy:hh:mi:ss[,mm:dd:yyyy:hh:mi:ss]

  • -s [asc|desc]:summary_list sort_column_name

  • -o offset_number -c count_of_events

  • -h

Following are the examples of the -L option:

  • evweb eventviewer -L -e eq:4 -a 5:dd

  • evweb eventviewer -L

  • evweb eventviewer -L -s severity -o 0 -c 5

  • evweb eventviewer -L -h

-n [Event_Numbers]

Specifies one or more event numbers, separated by a comma.

If you use the -n switch with the -E option, you can use the -n switch only once.

If you use the -n switch with the -D option, you can use the -n switch multiple times. Following are the examples of the -n option:

  • evweb eventviewer -E -n 45

-o offset_number -c count_of_events

Defines the size of the summary list. You can use the -o switch only with the evweb eventviewer -L command. During a search operation, if the number of events in the summary list is large, use the -o and -c switches to specify the number of events in the summary list. Use the -o switch to define the offset and the -c switch to specify the number of events in the summary list. For example, assume that there are 200 events in the summary list. To view the first twenty events, specify an offset of zero and a count equal to 20, as follows:

-o 0 -c 20

To view the next set of twenty events specify:

-o 20 -c 20

-r [is|be|en|co][:]search_string

Searches the Event Archive for information based on the specified search string. The search is not case-sensitive. To use this switch, type an operator followed by a string. Use a colon to separate the operator and the string. Enclose the entire argument (operator and string) within double quotes. You can use the -r switch more than once within one command. The following operators can be used with the -r switch:

is

event description is exactly the same as the given string

be

event description begins with the given string

en

event description ends with the given string

co

event description contains the given string (default)

Following are the examples of the -r option:

  • -r "co:device not configured"

  • -r "be:The event" -r "en:event occurred"

-s [asc|desc]:summary_list sort_column_name

Displays the summary list of events sorted by specified order (ascending or descending) and column name. You can use -s switch only with the evweb eventviewer -L command. By default, the summary list is displayed in ascending order (asc). Use a colon to separate the sorting order and the summary column. Alternatively, you can separate the sort order and summary column with a space, but you must then enclose the entire string within double quotes. Following are the examples of the -s option:

  • -s desc:eventid

The following three commands have the same meaning:

  • -s asc:eventcategory

  • -s eventcategory

  • -s "asc eventcategory"

-t [eq|le|ge|bw]:mm:dd:yyyy:hh:mi:ss[,mm:dd:yyyy:hh:mi:ss]

Specifies date and time. Date-time can be represented by an operator followed by the date-time values. The following operators can be used with the -t switch.

eq

equal to

le

less than equal to

ge

greater than equal to

bw

between

Only one operator can be used at one time.

To use the bw operator, specify the lower and upper date-time values. For all other operators, you must specify only one date-time value. The format to specify date-time value is mm:dd:yyyy:hh:mi:ss. The date-time value are defined as:

mm

month

dd

date

yyyy

year

hh

hour

mi

minute

ss

second

Use a colon (:) to separate an operator and a date-time value. Use a comma (,) to separate two date-time values. Alternatively, you can specify an operator and a date-time value within double quotes. You must specify only one -t switch in a command.

Following are the examples of the -t option:

  • -t le:10:22:2004:00:00:00

  • -t ge:10:22:2004:08:45:00

The following two commands have the same meaning:

  • -t bw:10:22:2004:00:00:00,10:29:2004:00:00:00

  • -t "bw 10:22:2004:00:00:00,10:29:2004:00:00:00"

Note: The -a and -t switches are mutually exclusive. An error message is displayed if both the switches are used together in a command.

-v Event_categories

Specifies a list of event categories, separated by comma. Use this option as a part of the search criteria. Use evweb list -v command to find the possible values for this option. The event category strings are case-sensitive. Following are the examples of the -v option:

  • -v Processor,Memory

EXAMPLES

evweb eventviewer -L

  • Displays all events.

evweb eventviewer -L -e ge:4 -a 5:dd

  • Displays events that were generated in the last 5 days, with severity greater than or equal to Warning.

evweb eventviewer -L -i Evt001 \ -t bw:06:01:2005:12:05:00,07:01:2005:12:30:00 -s Severity

  • Displays all events with eventid='Evt001' that occurred between 1st June 2005, 12:05 hrs and 1st July 2005, 12:30 hrs and sorts the output by order of severity.

evweb eventviewer -L -s Severity -o 100 -c 25

  • Sorts all events by severity; skips the first 100 events and displays the next 25 events.

evweb eventviewer -E -n 2342

  • Displays the details of the event with event number '2342'.

evweb eventviewer -D -n 8432,8434

  • Deletes the events with event number 8432 and 8434.

evweb eventviewer -D -e le:3

  • Deletes all events with severity less than or equal to 3.

evweb eventviewer -D -f -r "be:This is" -a 24:hh

  • Deletes all events starting with the error message "This is" that occurred in the last 24 hours. This command does not prompt users for confirmation before deleting the events.

AUTHOR

evweb eventviewer is developed by HP.

Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© 1983-2007 Hewlett-Packard Development Company, L.P.