Note the following:

  • In most cases, a single event sub element suffices, but multiple events can be provided, as shown for the pix driver.

  • It is expected that Regular Expressions (RegEx) are used as a best practice for the following values:

    <MatchString>

    <NegativeMatchString>

    <ChangedBy>

    Caveat:

  • To keep xmls uncomplicated, one of the limitations is that currently the ANDing of <MatchString> as a match is not provided. However, this should very rarely be needed if proper regular expressions are used. Also, fallback to DASL is available.

  • NetScreen SysLog xml is disabled by default (fallback to dasl script occurs).

  • Replace the %DEVICESERVERIPADDR% variable with the actual value of the Device Server IP Address, and enable by changing the value of the <IsActive> variable to true before use.