<html> <b>NAME</b><br> slowedit find - search the database for particular events <p> <b>SYNOPSIS</b><br> <code><ul> <b>slowlist</b> switches <b>find</b> pattern </ul></code> <p> <b>DESCRIPTION</b><br> <b>slowedit find</b> serches the database for events that match the <code>pattern</code> specified. The <code>pattern</code> is composed of items from the <a href="events.html">standard event set</a>. <p> The two-letter event items may be specified as being less-than (e.g. <code>er<<i>value</i></code>), greater-than (e.g. <code>er<<i>value</i></code>), or equal-to (e.g. <code>er=<i>value</i></code>) to a specified value. For example, the following will search for, and print, all records with more than 300 envelope recipients: <br><code><ul> slowedit find "er>300" </ul></code> Note that the pattern should be quoted to supress the special meaning of > and < to the shell. <p> Three-letter (boolean) event items are specified by entering the item name, followed by an equal sign, and then one of three keyworks: <code>set</code>, <code>clear</code>, or <code>only</code>. The <code>set</code> keyword means you want to find all records with that item set (TRUE). The <code>clear</code> means you want to find all records with that item clear (FALSE). And <code>only</code> means that of all the boolean items, this will be the only one set (the only one TRUE). <p> To illustrate consider the desire to find all record that were not recived on an network interface and for which sendmail aborted: <br><ul> <code>slowedit find net=set,abo=set </code>– These set among others<br> <code>slowedit find net=only,abo=only </code>– Only these set<br> </ul> Note that, unless you specify otherwise with an <code>or</code> keyword, the search will only return records that match all (logical AND) the items specified. Thus, to perform the first search above, where either item may be set, you would use the <code>or</code> prefix like this: <br><code><ul> slowedit find or,net=set,abo=set </ul></code> Even though the default is a logical AND, an <code>and</code> prefix is also available, but optional: <br><code><ul> slowedit find and,net=set,abo=set </ul></code> The text portion of the Message-Id: header's value may also be searched using extended regular expressions. For example, the following will search for all records from <i>microsoft.com</i>: <br><code><ul> slowedit find msgid="*@microsoft.com" </ul></code> Because all searches are case insensitive there is no need to specify case in your search. <p> Because <b>find</b> searches the entire database for arbitray patterns, the search can become quite slow as the database grows. <p> There is currently no way to search by date or IP number. </body> </html>
| # | Change | User | Description | Committed | |
|---|---|---|---|---|---|
| #1 | 3998 | bryan_costales |
Brought the whole distribution up to V0.9 Added a huge abount of documentation. Added slowedit find Created startup scripts to launch for testing Fixed numerous bugs. Fixed a few portablity issues. Installed hooks for whitelisting and IP aliases. |