Scanning System Log Files

A common request we often receive is “How do I search my console messages for specific strings?” We offer a free utility CLUE/3000, a simple program that scans for multiple strings. There are three easy steps to running CLUE/3000. First, run the program using the ,SETUP entry point to set the beginning and ending log file numbers to search. Second, a file equation for CLUERPT to direct the output. Last, run CLUE/3000 supplying the string(s) sought separated by commas as an ;INFO string.

:run clue3000.util.esp,setup


STARTING FILE NUMBER = >>> 0; NEW NUMBER: 1997
ENDING FILE NUMBER = >>> 0; NEW NUMBER: 2000


END OF PROGRAM
:file cluerpt;dev=lp
:run clue3000.util.esp;info="INVALID,MISSING"


CLUE/3000 XL.3 COPYRIGHT (c) 1990 BEECHGLEN DEVELOPMENT INC. (513) 922-0509
OPENING FILE >>> LOG1997.PUB.SYS
OPENING FILE >>> LOG1998.PUB.SYS
OPENING FILE >>> LOG1999.PUB.SYS
OPENING FILE >>> LOG2000.PUB.SYS
END OF PROGRAM
:

To direct the output to your terminal instead of a printer then change your file equation to:

:file cluerpt=$STDLIST

To search for all logon and logoff messages to the modems on logical devices 21, 100, and 101 try this:

:run clue3000.util.esp;info="#21.,#100.,#101."

To select all tape drive mount message use this:

:run clue3000;info="mounted on LDEV#"

A report created by CLUE/3000 looks like this:


VVVVVVVVVVVVVVVVVVVVV START PROCESSING FILE LOG1992.PUB.SYS VVVVVVVVVVVVVVVVVVV

THE FIRST ENTRY IN THIS FILE WAS WRITTEN ON THU, FEB 21, 2002, 12:00 AM
QUALIFIERS USED TO PICK ENTRIES >mounted on LDEV#

8:46/#S75/48/Vol (unlabelled) mounted on LDEV# 7
9:09/20/Vol (unlabelled) mounted on LDEV# 8
17:53/20/Vol (unlabelled) mounted on LDEV# 8

THE LAST ENTRY IN THIS FILE WAS WRITTEN ON FRI, FEB 22, 2002, 12:00 AM
^^^^^^^^^^^^^^^^^^^^^^^^ END OF FILE ON LOG1992.PUB.SYS ^^^^^^^^^^^^^^^^^^^^^^

Finding the exact string to search to obtain the desired records while weeding out records you don’t want can sometimes be tricky. With a bit of practice you will quickly get a feel for the right types of search strings.

How Do I Install CLUE/3000?

CLUE/3000 is already on your system if you have loaded ESP/3000, our performance data collection software, named CLUE3000.UTIL.ESP. It may need to be extracted from the UTILS.PUB archive file using this procedure:

:hello mgr.esp,util
:glunpack
-------------------------------------------------------------------------
UHAUL (A.00.16) MPE V/XL - HP3000 System Support Tool
MON, APR 1, 2002, 5:18 PM Copyright Hewlett Packard Co. 1983,1986
-------------------------------------------------------------------------
DO YOU WANT TO LOAD, UNLOAD OR LIST FILES ?unload
ENTER THE NAME OF YOUR TRUCK
(THE DISC FILE YOU WANT TO UNLOAD FROM) utils.pub
UNLOAD UTILS.PUB.ESP

ALLOWME
CLUE3000
COPY
DBLOADCB
ESPINFO
FILERPT
LPRESET
PCLINK
PCLINK2
PPLHOSTP
VTCONSOL
UNLOAD COMPLETED SUCESSFULLY
CHECKSUM FOR TRUCK FILE UTILS.PUB.ESP IS 36654 1400
:

Alternatively, if you haven’t installed ESP/3000 yet you can download CLUE/3000 from our Web Site at http://www.beechglen.com/mpe/downloads/.