04-19-2010 11:56 AM
Hello,
how correctly write event syslog pattern
if i want to catch debug isdn q931 events:
Call rejected
No circuit/channel available
Resource unavailable, unspecified
Unallocated/unassigned number
I wrote
event syslog pattern ".*Call rejected.*No circuit/channel available.*Resource unavailable, unspecified.*Unallocated/unassigned number"
but it don't work.
Regards,
Mike
Solved! Go to Solution.
04-19-2010 11:58 PM
If you want one policy to match all messages, you want something like:
event syslog pattern "Cause i =.*(Call rejected|No circuit/channel available|Resource unavailable, unspecified|Invalid information element contents|Switching equipment congestion|Unallocated/unassigned number)"
04-19-2010 08:40 PM
This doesn't look right. Are each of these messages are unique lines? Can you post the show log output showing the messages you wish to match?
04-19-2010 10:05 PM
Hello!
The lines which i want to match are
Cause i = 0x8295 - Call rejected
Cause i = 0x8AA2 - No circuit/channel available
Cause i = 0x80AF - Resource unavailable, unspecified
Cause i = 0x0080E408 - Invalid information element contents
Cause i = 0x82AA - Switching equipment congestion
Cause i = 0x8281 - Unallocated/unassigned number
Regards,
Mike
04-19-2010 11:58 PM
If you want one policy to match all messages, you want something like:
event syslog pattern "Cause i =.*(Call rejected|No circuit/channel available|Resource unavailable, unspecified|Invalid information element contents|Switching equipment congestion|Unallocated/unassigned number)"
04-20-2010 12:15 AM
Thank you!
It works now!
Regards,
Mike
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide