Unsolved

1 Rookie

 • 

2 Posts

22

August 20th, 2025 07:47

uemcli event log filtering does not behave like through WebUI

Hello,

When using WebUI I can review all event logs by entering WebUI > Events > Logs.


Then I can enable filtering using the filter icon on the top right-hand side above the table.
Once filtering is enabled, I can filter only events with Severity "Critical", "Error" or "Warning".
On my system "Information" severity events represent more 99.9% of all events, and "Information" severity events are generally speaking of less interest to me.

I'm trying to find a way to mimic the above action using "uemcli", but the CLI does not behave as expected.
I can use fromTime and toTime options to narrow down the time-interval, I can use MessageID to retrieve specific events, and I can request filter by severity. The number of records that can be retrieved with one command is limited to 100.

However, the behavior of "uemcli" differs from WebUI because it seems that the number-of-records limit is applied before the severity filter is applied.
First 100 records are retrieved following fromTime, toTime and other options, and only later the severity filter is applied onto these 100 records - further reducing the number of rows returned. I am trying to use severity "Notice" as filter criteria because this should display all events except "Information".
Typically I get no output at all because within 100 records starting backwards from toTime (or current time) there are almost exclusively events with severity "Information".

Does anybody know how to mimic (replicate) the behavior of the WebUI use?

Sincerely,
    Krešimir

Moderator

 • 

9.4K Posts

August 20th, 2025 14:55

Hi,

 

Thanks for your question.

I am not sure of a way to change umcli behavior. https://www.dell.com/support/manuals/en-us/unity-380/unity_p_cli_user_guide/view-event-records?guid=guid-3a0d80b4-6492-42c9-b9a4-3e698e292ea1&lang=en-us

Let us know if you have any additional questions.

1 Rookie

 • 

2 Posts

August 22nd, 2025 12:26

Hello Josh,

Thank you for taking the time to respond, as well as for suggesting a link to the uemcli manual.

I have read the uemcli manual and used it to try to find an answer for my question prior to asking here.

While it may be that uemcli behaves as designed, I find it quite strange that with command ...

    uemcli /event/log show -messageID 14:60772

... I get 42 records of severity "warning" dating back from mid-April until today, while with command ...

    uemcli /event/log show -severity warning

... I get 0 records with severity warning.

Knowing there are severity-warning events (filtered using a known EventID) and not being able to get those same events by using filter-by-severity does simply not seem logical.

I will continue searching for a reasonable answer and hoping a solution might pop-up here.

Sincerely,

    Krešimir

No Events found!

Top