Scanning System Log Files

A common request we often receive is “How do I search my console messages for specific strings?” We offer a free utility CLUE/3000, a simple program that scans for multiple strings. There are three easy steps to running CLUE/3000. First, run the program using the ,SETUP entry point to set the beginning and ending log file numbers to search. Second, a file equation for CLUERPT to direct the output. Last, run CLUE/3000 supplying the string(s) sought separated by commas as an ;INFO string.

:run clue3000.util.esp,setup

STARTING FILE NUMBER = >>> 0; NEW NUMBER: 1997 ENDING FILE NUMBER = >>> 0; NEW NUMBER: 2000

END OF PROGRAM :file cluerpt;dev=lp :run clue3000.util.esp;info="INVALID,MISSING"

CLUE/3000 XL.3 COPYRIGHT (c) 1990 BEECHGLEN DEVELOPMENT INC. (513) 922-0509 OPENING FILE >>> LOG1997.PUB.SYS OPENING FILE >>> LOG1998.PUB.SYS OPENING FILE >>> LOG1999.PUB.SYS OPENING FILE >>> LOG2000.PUB.SYS END OF PROGRAM :

To direct the output to your terminal instead of a printer then change your file equation to:

:file cluerpt=$STDLIST

To search for all logon and logoff messages to the modems on logical devices 21, 100, and 101 try this:

:run clue3000.util.esp;info="#21.,#100.,#101."

To select all tape drive mount message use this:

:run clue3000;info="mounted on LDEV#"

A report created by CLUE/3000 looks like this:


VVVVVVVVVVVVVVVVVVVVV START PROCESSING FILE LOG1992.PUB.SYS VVVVVVVVVVVVVVVVVVV

THE FIRST ENTRY IN THIS FILE WAS WRITTEN ON THU, FEB 21, 2002, 12:00 AM
QUALIFIERS USED TO PICK ENTRIES >mounted on LDEV#

8:46/#S75/48/Vol (unlabelled) mounted on LDEV# 7
9:09/20/Vol (unlabelled) mounted on LDEV# 8
17:53/20/Vol (unlabelled) mounted on LDEV# 8

THE LAST ENTRY IN THIS FILE WAS WRITTEN ON FRI, FEB 22, 2002, 12:00 AM
^^^^^^^^^^^^^^^^^^^^^^^^ END OF FILE ON LOG1992.PUB.SYS ^^^^^^^^^^^^^^^^^^^^^^

Finding the exact string to search to obtain the desired records while weeding out records you don’t want can sometimes be tricky. With a bit of practice you will quickly get a feel for the right types of search strings.

How Do I Install CLUE/3000?

CLUE/3000 is already on your system if you have loaded ESP/3000, our performance data collection software, named CLUE3000.UTIL.ESP. It may need to be extracted from the UTILS.PUB archive file using this procedure:

:hello mgr.esp,util :glunpack ------------------------------------------------------------------------- UHAUL (A.00.16) MPE V/XL - HP3000 System Support Tool MON, APR 1, 2002, 5:18 PM Copyright Hewlett Packard Co. 1983,1986 ------------------------------------------------------------------------- DO YOU WANT TO LOAD, UNLOAD OR LIST FILES ?unload ENTER THE NAME OF YOUR TRUCK (THE DISC FILE YOU WANT TO UNLOAD FROM) utils.pub UNLOAD UTILS.PUB.ESP

ALLOWME CLUE3000 COPY DBLOADCB ESPINFO FILERPT LPRESET PCLINK PCLINK2 PPLHOSTP VTCONSOL UNLOAD COMPLETED SUCESSFULLY CHECKSUM FOR TRUCK FILE UTILS.PUB.ESP IS 36654 1400 :

Alternatively, if you haven’t installed ESP/3000 yet you can download CLUE/3000 from our Web Site at http://www.beechglen.com/mpe/downloads/.