Dawne, The Logit action causes an event to be written to the system's application eventlog. $file is used to include the name of the Policy that was run.
I have pasted below the help text for Logit, I hope this helps. Configuring the Logit Action ---------------------------- As supplied with System Scanner, the command for the logit action is as follows: logevent /i W /f "$file" logevent procedure This is the procedure logevent followed by two parameters: /i (importance), which currently shows the value W (warning) /f (the policy that triggered the event), followed by the substitution variable that will be replaced with the name of the file when the action occurs. In this example, you will change the importance to information, and add the name of the destination host (the host the log file you want to write to resides on) and the message text that you want to appear in the log. The parameter for destination host is /d. The parameter for message text is /m. Therefore, you should edit the command to read: logevent /i I /d hostname /f "$file" /m "The example event will be logged." This is the procedure logevent followed now by four parameters: /i is the importance, now I for Information /d is the destination hostname. You must replace the word hostname with the name of the destination host. /f is the policy that triggered the alert, still using the substitution variable /m is the message text. You should replace the text in quotation marks with text that is logical for the alert you are creating. Nick Connor Assuria Limited -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of dawne Sent: 15 April 2005 06:42 To: [email protected] Subject: [ISSForum] problem with system scanner log file hey there! using system scanner 4.2.5 console and 4.2 agents. When I do a scheduled scan, I want to log a message on a specified computer. this is the command i used : logevent /i I /d com1 /f "$file" /m "scheduled scan started" tried to change "$file" to a local directory "D:\...." because at first i assumed that the file will automatically be logged in the console log file, however it was not. Anyway, no log was logged in the D:\..... directory either! why so? thanks! Yahoo! Messenger - Log on with your mobile phone! _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
