5.9  Creating New Binary Event Log Files

You can filter the contents of existing binary event logs into a new log file containing a subset of the events from the originals. When you create the new log, SEA checks the events in the originals against the filter statement, and only events that pass the filter get added to the new file:

wsea bin [input inputfile(s)] out outputfile [filterstatement] [skipconfig]

The newly created binary event log file can be used for analysis, translation, or any other SEA operation; however, be aware that analysis may produce incomplete or invalid results due to missing data that was filtered out.

To create a new binary event log file with another syntax, see Appendix E.

Input Files

By default, the system event log is used as the input file. If you want to process a different binary log file or files, you must specify the input file location and name. See Section 5.10.1 for more information on working with input files.

Multiple Input Files—You can specify multiple input files to merge into a single binary log (in which case filtering occurs for each input file before the events are written to the new file). If you merge files, however, be aware that SEA does not remove duplicate events.

Output Files

You must specify a file name and location where the new binary output file will be saved. The output file parameter is mandatory when you are creating a new binary event log file.

Filtering Log Files

You can identify a subset of the events from a binary event log file that you want to include in the new log file by defining a filter. If you do not define a filter, the new log file will contain all the events in the existing log file. For more information on filtering see Section 5.10.3.

Skipping Configuration Entries

If you are using the new common syntax, you can keep configuration entries from being automatically inserted by adding the skipconfig parameter to your command. This parameter prevents configuration entries from the original log files that are needed for analysis from being inserted into the new log file if they would normally be filtered out.