CAIQUM-8892: Active IQ Unified Manager 9.18+ keeps adding exclude rules to the Syslog Filter
Issue
Starting with Active IQ Unified Manager 9.18, AIQUM will use event filters for manually subscribed EMS events rather than leveraging event route show and event destination show.
Automatically subscribed events will have a filter with the name[umhostname]_filter
Manually subscribed events will have a filter with the name[umhostname]_filterSyslog
The syslog filter will periodically have extra exclude rules to the filter until it hits the Ontap rule limit.umserver_filterSysLog
2 include wafl.snap.create.skip.reason
EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
Standard, Built-in, Severity-based
*=*
3 include wafl.vol.outOfInodes
EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
Standard, Built-in, Severity-based
*=*
4 include wafl.dir.size.max.warning
EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
Standard, Built-in, Severity-based
*=*
5 include vol.language.changed
EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
Standard, Built-in, Severity-based
*=*
6 include callhome.clus.net.degraded
EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
Standard, Built-in, Severity-based
*=*
7 include wafl.vvol.offline
EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
Standard, Built-in, Severity-based
*=*
8 exclude * * * *=*
9 exclude * * * *=*
10 exclude * * * *=*
11 exclude * * * *=*
12 exclude * * * *=*
13 exclude * * * *=*
14 exclude * * * *=*
