selogrd conf question

Article Id: 194505
Status: Published
Updated On: 07-07-2020 09:26
Products:
CA Virtual Privilege Manager , CA Privileged Identity Management Endpoint (PIM)
Issue/Introduction:

Hi ,  I am trying to exclude this form our selogrd conf file

03 Apr 2020 10:47:25 M START                                    devcalc        

03 Apr 2020 10:47:30 M SHUTDOWN                5e840920:00000152                 0 devcalc

DETAIL
3 Apr 2020 10:47:25 M START                                    devcalc

Event type: Daemon start
Daemon: devcalc
Date: 03 Apr 2020
Time: 10:47

I have tried this and other variations

etrust down file
file /usr/seos/log/etdown.log
include Code(M).
exclude Uid(devcalc).



Environment:

Release : 12.8

Component : CA ControlMinder

Resolution:

etrust down file
file /usr/seos/log/etdown.log
exclude Code(M) Service(devcalc)

Code(M) = Startup and shutdown events.
Service(devcalc) = the service devcalc

So you are excluding startup and shutdown events for devcalc.