Hello,

When using WebUI I can review all event logs by entering WebUI > Events > Logs.

Then I can enable filtering using the filter icon on the top right-hand side above the table.
Once filtering is enabled, I can filter only events with Severity "Critical", "Error" or "Warning".
On my system "Information" severity events represent more 99.9% of all events, and "Information" severity events are generally speaking of less interest to me.

I'm trying to find a way to mimic the above action using "uemcli", but the CLI does not behave as expected.
I can use fromTime and toTime options to narrow down the time-interval, I can use MessageID to retrieve specific events, and I can request filter by severity. The number of records that can be retrieved with one command is limited to 100.

However, the behavior of "uemcli" differs from WebUI because it seems that the number-of-records limit is applied before the severity filter is applied.
First 100 records are retrieved following fromTime, toTime and other options, and only later the severity filter is applied onto these 100 records - further reducing the number of rows returned. I am trying to use severity "Notice" as filter criteria because this should display all events except "Information".
Typically I get no output at all because within 100 records starting backwards from toTime (or current time) there are almost exclusively events with severity "Information".

Does anybody know how to mimic (replicate) the behavior of the WebUI use?

Sincerely,
    Krešimir