Skip to main content
ShazzyS
Staff
Staff
January 5, 2017

Technical Note: How to delete an event filter in Shelf Manager

  • January 5, 2017
  • 0 replies
  • 1224 views
Description
This article explains how to delete an event filter that has been configured in Shelf Manager.

Scope
Shelf Manager.

Solution
A specific event_filter entry can be deleted by replacing the entry to 0.

1)  To check if any event filter is configured
#clia getpefconfig event_filter

Pigeon Point Shelf Manager Command Line Interpreter

    Active Event Filters:
        None

2)  To configure an event filter.
#clia setpefconfig event_filter 3 80 1 5 02 86 FF FF FF FF FF FF 0 0 0 0 0 0 0 0 0

3)  To check that an event filter has been added.
# clia getpefconfig event_filter

Pigeon Point Shelf Manager Command Line Interpreter


    Active Event Filters:
    0x03: Software Configurable Filter
        Action Mask: 0x01
        Policy Number: 5, Severity: Information
        Source Address: 0x86, Generator ID2: 0xff (ANY)
        Sensor Type: ANY (0xff), Sensor # 255 (ANY)
        Event Trigger: 0xff (ANY), Event Offset Mask: 0xffff
        0: AND: 0x00, CMP1: 0x00, CMP2: 0x00
        1: AND: 0x00, CMP1: 0x00, CMP2: 0x00
        2: AND: 0x00, CMP1: 0x00, CMP2: 0x00

4)  To delete the event filter which was created earlier.
# clia setpefconfig event_filter 3  00 0 0 00 00 00 00 00 00 00 00 0 0 0 0 0 0 0 0 0

5)  To verify that the event filter has been deleted.
# clia getpefconfig event_filter

Pigeon Point Shelf Manager Command Line Interpreter

    Active Event Filters:
        None

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.