E.5.5  Modifying Commands

By default, the analysis, translation, summary and new binary log file commands all process the system event log. The output from analysis, translation and summary commands is displayed on the screen. You can change these defaults in order to process other binary log files and save the processing results to a file. With some of the commands you can further restrict the events that are processed by filtering the binary log file used for input. The following sections describe how to use these features.

E.5.5.1  Input Files

To change the input file used by a command, add the path and file name of the desired file to the end of the command.

For example:

wsea v /ana [.examples]memory_channel_adapter.errlog

When you are specifying an input file, the following guidelines apply:

E.5.5.2  Output Files

Note


These output file guidelines do not apply when you are creating a new binary event log. See Section E.5.4 for more details.


To specify an output file, use the following modifier:

/out=filename
The modifier creates a text output file. The filename indicates the path and name where you want to save the output.

The following examples shows a command that specify output files:

wsea v /ana/out=results.txt

E.5.5.3  Filtering

The /tra, /sum, and /bin commands enable you to filter a binary event log file and only process a subset of the events. You can include multiple filter statements by using more than one filtering flag in a command.

Table E–9 describes the DECevent OpenVMS filtering statements.

Table E–9 Filtering Statements (DECevent OpenVMS syntax) 
Filter Statement
Description
/SIN="date"
/BEF="date"
Filters based on the time the event occurred. No events that occurred before the given start time or after the given end time are processed. The date can be entered in any format supported by Java (for example, dd-mmm-yyyy,hh:mm:ss). You do not need to include the time (hh:mm:ss) with the date. You can use the keywords YESTERDAY and TODAY.
/INC(keyword)
/EXC(keyword)
Filters based on the numeric entry type. You must enter a keyword rather than the actual entry type. See Table E–10 for information on supported keywords.
/NOD=name
Filters based on the node responsible for generating the event. The name argument is case sensitive.
/ENT=(S:nn,E:nn)
Filters based on the event's position in the event log. The first event in the file is event index 1.
/REV
Processes the events in reverse order according to the event index number.
Table E–10 Event Type Keywords (DECevent OpenVMS syntax) 
Keyword
Description
cam
All SCSI entries logged by the CAM logger (199).
configurations
Configuration entries (110).
control_entries
System startup entries or new error log creation entries (32, 35, 300).
cpus
Machine check entries for AXP (mchk-cpu).
environmental_entries
Power entries (mchk-env).
swxcr
Entries logged by SWXCR (198).
machine_checks
mchks
Events with machine checking information (mchk).
operating_system=value
os=value
Events with a specific operating system type. The value parameter indicates the numeric code for the desired operating system.
panic
Crash re-start, system panic, or user panic entries (37, 302).
software_informationals
swi
Events with lastfail, system startup, or system configuration information (volume mounts, volume dismounts, new error logs, timestamp entries) (32, 35, 37, 38, 39, 64, 65, 250, 300, 301, 310).

Examples—DECevent OpenVMS

The following examples show sample commands that use filtering.

Processes events from the system described by ComputerName:

wsea v /tra/nod=ComputerName
wsea v /sum/nod=ComputerName
wsea v /bin=outputfile.bin/nod=ComputerName inputfile.zpd

Processes events that occurred before 8:33:57 PM on January 31, 2000:

wsea v /tra/bef="31-Jan-2000,20:33:57"
wsea v /sum/bef="31-Jan-2000,20:33:57"
wsea v /bin/bef="31-Jan-2000,20:33:57"

Processes all CPU machine check events:

wsea v /tra/inc(cpu)
wsea v /sum/inc(cpu)
wsea v /bin=outputfile.bin/inc(cpu) inputfile.zpd

Processes all events without an operating system type of 1. The translation command presents the output in reverse chronological order:

wsea v /tra/EXC(operating_system=1)/rev
wsea v /sum/EXC(operating_system=1)
wsea v /bin=outputfile.bin/EXC(operating_system=1) inputfile.zpd

Processes all the events after the fifteenth event in the log file:

wsea v /tra/ent=(s:15)
wsea v /sum/ent=(s:15)
wsea v /bin=outputfile.bin/ent=(s:15) inputfile.zpd