DataPower

DataPower

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

How to suppress events in log target based on string?

  • 1.  How to suppress events in log target based on string?

    Posted Thu August 27, 2020 06:24 PM

    Hello,

    My team and I are seeing some logs in our log targets that we want to suppress.

    Initially we were going to do event suppression by code, but the code of the error we want to suppress is used for others that we don't want to miss.

    Is there a way to suppress error based on a string pattern or something similar?



    #DataPower
    #Support
    #SupportMigration


  • 2.  RE: How to suppress events in log target based on string?

    Posted Mon August 31, 2020 07:41 AM

    Hi Nikolaus,

    This is not possible to my knowledge, at this time it's only possible by event code, as you say.

    It seems few years ago a similar RFE (https://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=69775) got declined, unfortunately it doesn't expose reasoning.

    Maybe you try again filing a fresh RFE, either requesting unique log ids or an add-on filter for string/regex (something in that direction is already available for event triggers), on top of the event code filter.

    Is there a specific log message that you struggle with?



    #DataPower
    #Support
    #SupportMigration


  • 3.  RE: How to suppress events in log target based on string?

    Posted Mon August 31, 2020 04:29 PM

    Hey August,

    Thanks so much for responding on this.

    I looked at that RFE, it's too bad it didn't gain traction. I may try to file another and see where it goes.

    I will tell you about our specific problem. Basically, our RBM settings are set to communicate with our Active Directory servers, and even though the communication works fine, there is a problem where the AD server is sending some kind of unsupported reply tag. Here are the words of the IBM support specialist I was talking with:

    From review, we can see that it is accompanied by the unknown reply tag 115 error below. 20200717T200605.351Z [0x80e0027c][ldap][warn] xmlmgr(map-manager): tid(155638415) gtid(b0d4b4f15f1204ad0946da8f): Searching LDAP server <ip-address-here> for DN DC=corp, DC=mastercard, DC=test failed: Unknown reply tag 115

    And here is the log message we get in the default log:

    20200831T133000.806Z [0x80e0018d][ldap][error] xmlmgr(map-manager): tid(779089) gtid(d1d5cdab5f4cfb58000be351): Error querying server 10.158.131.139: Error while searching; see log for details

    "0x80e0018d" is the code we would normally suppress, but my main worry is that we might suppress other things. I searched for the code online and i found a couple other issues where this code comes into the logs.

    So if there was a way to just suppress this one string, it would be nice



    #DataPower
    #Support
    #SupportMigration


Related Content