selogrd conf question

Products

• CA Virtual Privilege Manager
• CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

Hi ,  I am trying to exclude this form our selogrd conf file

03 Apr 2020 10:47:25 M START                                    devcalc        

03 Apr 2020 10:47:30 M SHUTDOWN                5e840920:00000152                 0 devcalc

DETAIL

3 Apr 2020 10:47:25 M START                                    devcalc

Event type: Daemon start
Daemon: devcalc
Date: 03 Apr 2020
Time: 10:47

I have tried this and other variations

etrust down file
file /usr/seos/log/etdown.log
include Code(M).
exclude Uid(devcalc).

Environment

Release : 12.8

Component : CA ControlMinder

Resolution

etrust down file
file /usr/seos/log/etdown.log
exclude Code(M) Service(devcalc)

Code(M) = Startup and shutdown events.
Service(devcalc) = the service devcalc

So you are excluding startup and shutdown events for devcalc.