XMA:An example of XMA FILTER that supports IEFT format messages

XMA:An example of XMA FILTER that supports IEFT format messages

ACTION_BEGIN
     ACTIONTYPE SYSLOGQ
     IPALERT_MSGDELIMITER CR
     IPALERT_IPPROCESS $ZTC0
     IPALERT_ADDRESS 10.12.34.56
     IPALERT_PORT 7890
!==
!==  ALERTSTRINGs for IEFT format : HEADER + (nil) + MSG
!==  
!==  ALERTSTRINGs for HEADER
     ALERTSTRING <1> VERSION
     ALERTSTRING |(substr(AUDIT.RECORDLCT,1,10)}|T|{substr(AUDIT.RECORDLCT,12,12))|
     ALERTSTRING |(INSTALL.SYSTEMNAME)|
     ALERTSTRING |(SESSION.CLIENTPROGRAM)|
     ALERTSTRING |(SESSION.PROCESSTHREADID)|
     ALERTSTRING |(SESSION.SESSIONID)|
!== 
!==  STRUCTURED-DATA: (nil) contains ZERO STRUCTURED-DATA elements
!==
!==  ALERTSTRINGs for MSG (free format)
     ALERTSTRING XMA AUDIT data::
     ALERTSTRING GMT date:|{substr(AUDIT.RECORDGMT,1,10))|
     ALERTSTRING GMT time:|{substr(AUDIT.RECORDGMT,12,12))|
     ALERTSTRING outcome:|{AUDIT.OUTCOME)|
     ALERTSTRING productcode:|{AUDIT.PRODUCTCODE)|
     ALERTSTRING subject_userid:|{AUDIT.SUBJECT_USERNUMBER_MAJOR)|
     ALERTSTRING |(AUDIT.SUBJECT_USERNUMBER_MINOR)|
     ALERTSTRING subject_loginname:|{AUDIT.SUBJECTLOGIN)|
     ALERTSTRING target_loginname:|{AUDIT.TARGETLOGIN)|
     ALERTSTRING objecttype:|{AUDIT.OBJECTTYPE)|
     ALERTSTRING objectname:|{AUDIT.OBJECTNAME)|
     ALERTSTRING operation:|{AUDIT.OPERATION)|
     ALERTSTRING terminal:|{AUDIT.TERMINAL)|
     ALERTSTRING user_data:|{AUDIT.USER_DATA)|
     ALERTSTRING result:|{AUDIT.RESULT)|
     ALERTSTRING XMA SESSION data::
     ALERTSTRING sessionid:|{SESSION.SESSIONID)|
     ALERTSTRING sessionname:|{SESSION.SESSIONNAME)|
     ALERTSTRING ipaddr:|{SESSION.IPADDRV46)|
     ALERTSTRING dnsname:|{SESSION.DNSNAME)|
     ALERTSTRING clientprogram:|{SESSION.CLIENTPROGRAM)|
ACTION_END