selogrd conf question

book

Article ID: 194505

calendar_today

Updated On:

Products

CA Virtual Privilege Manager CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

Hi ,  I am trying to exclude this form our selogrd conf file

03 Apr 2020 10:47:25 M START                                    devcalc        

03 Apr 2020 10:47:30 M SHUTDOWN                5e840920:00000152                 0 devcalc

DETAIL
3 Apr 2020 10:47:25 M START                                    devcalc

Event type: Daemon start
Daemon: devcalc
Date: 03 Apr 2020
Time: 10:47

I have tried this and other variations

etrust down file
file /usr/seos/log/etdown.log
include Code(M).
exclude Uid(devcalc).



Environment

Release : 12.8

Component : CA ControlMinder

Resolution

etrust down file
file /usr/seos/log/etdown.log
exclude Code(M) Service(devcalc)

Code(M) = Startup and shutdown events.
Service(devcalc) = the service devcalc

So you are excluding startup and shutdown events for devcalc.