EventFilter

Synopsis

[Logging] EventFilter=n

n is the list of patterns to be included and excluded from the structured log.

Description

Filter patterns can be specified in the following format:

+<pattern>: Include events matching <pattern>
-<pattern>: Exclude events matching <pattern>
<pattern>: Default include (equivalent to +<pattern>)

Consider the following syntactical rules when specifying filter patterns:

• Use a period (.) as a separator for hierarchical names, such as A.B.C

• Use an asterisk (*) as a wildcard only at the end of patterns, such as A.B.*, which includes all sub-events under A.B

• Use a comma (,) to separate multiple filter patterns, such as -A,A.B

For example:

-Audit.*,Audit.LoginFailure

Excludes all Audit events except LoginFailure.

Events not specified in the filter are included. Specific rules take precedence over wildcard rules, and more detailed patterns have higher priority. For example, -A.B.C has a higher priority than +A.

Changing This Parameter

You can change this parameter using the Management Portal, the ^LOGDMN routine, or the class-based API (all described in Configure Structured Logging). Alternatively, you can edit the CPF in a text editor (as described in Editing the Active CPF).