Note the following:
In most cases, a single event sub element suffices, but multiple events can be provided, as shown for the pix driver.
It is expected that Regular Expressions (RegEx) are used as a best practice for the following values:
To keep xmls uncomplicated, one of the limitations is that currently the ANDing of <MatchString> as a match is not provided. However, this should very rarely be needed if proper regular expressions are used. Also, fallback to DASL is available.
NetScreen SysLog xml is disabled by default (fallback to dasl script occurs).
Replace the %DEVICESERVERIPADDR% variable with the actual value of the Device Server IP Address, and enable by changing the value of the <IsActive> variable to true before use.