Matching All Messages from a Host

The following pattern matches any message from host "A18W". The only required token is HOSTID.

DEFINE "host"
MESSAGE "Message text"
TYPE OTHER ANY-SENDER VARIABLE-LENGTHTOKEN 
HOSTID "A18W"     
.     
.     
.

Since any message from host A18W matches this standard pattern, SP-AMS does not search the nonstandard patterns in the database.

Masking Host-Id Tokens

Masking is allowed in host-id tokens. The host-id is not displayed in the message, but it is available for pattern matching.

For example, assume a pattern exists for a message and SP-AMS is to perform the associated actions only when UNIX system "UN1" issues the message. You can specify the following host-id token:

TOKEN HOSTID "UN1"

Instead, if SP-AMS is to perform actions associated with messages from any system with a 3- or 4-character name beginning with "UN", you can specify the following masked host-id token:

TOKEN HOSTID "UN\?1\\*1\"