show event

Displays the contents of the event log.

show event 
 
           [ <start> ] 
 
           [ end <end> ]
 
           [ detail ] 
 
           [ count <number> ] 
 
           [ prefix <prefix> | group <group-name> ] 
 
           [ link <link-name> ] 
 
           [ selected ]
 
           [ asserted ]
 
           [ confirmed ]
 
           [ bgp-announcement ]
 
           [ bgp-withdrawal ]
 
           [ bgp-summary ]
 
           [ link-status ]
 
           [ unlogged-action ]
 
           [ state-transition ]
 
           [ peer-status ]
 
           [ em-start ]
 
           [ outage ]
 
           [ not-rescued-outage ]
 
           [ | { include | exclude } <exp> ] 
 
           [ > <url> ]
 

• start--show events from this time, in yyyy-mm-dd_HH-MM-SS format
• end--show events until this time, in yyyy-mm-dd_HH-MM-SS format
• number--show this number of events, then exit the command
• prefix--prefix in CIDR format (a.b.c.d /n)
• group-name--name of a group
• link-name--name of a link
• exp--regular expression
• url--destination of output; can be FTP, HTTP, or HTTPS URL

System operations mode, login level access.

Use the show event command to view a list of event log messages, beginning at start time and ending at end time (if specified).

Specify all or part of a timestamp for start and end. Events shown will be those that come closest to matching the specified timestamps. For example, if you specify only a year for start, all events for that year will be displayed. (You must specify everything to the left of the desired time element. If you specify month you must include a year; if you specify day, you must include month and year, and so on.)

NOTE: The keyword raw is no longer supported.

The following additional keywords are supported:

• detail--displays all values for each event
• prefix--all events for a particular prefix
• group--all events for the prefixes in a particular group
• link--all events for a particular link
• selected--route-selected events
• asserted--route-asserted events
• confirmed--route-confirmed events
• bgp-announcement--BGP announcement events
• bgp-withdrawal--BGP withdrawal events
• bgp-summary--BGP summary events
• link-status--link-status events
• unlogged-action--events generated when there are lost events due to an overflow of the event queue
• state-transition--decision maker state transition events
• peer-status--CNA BGP peering events
• em-start--event manager start events
• outage--outage events
• not-rescued-outage--not rescued outage events

You can pipe the command through one of the following filters:

• include--shows all lines in the output which contain a match to the specified regular expression
• exclude--shows all lines in the output except those which contain a match to the specified regular expression

The vertical-line pipe character | is required when a filter is used.

You can send the output to a remote file location, by piping the display to a remote URL (leading > required). See the copy command for URL syntax.

The event log is limited to 500 MB of disk space. When this space is full, incoming messages overwrite the oldest existing messages.

See also the eventdump command.