An EMS event filter identifies an event that can be used to trigger a profile. To create an EMS event filter, use the following procedure:
create log filter name {copy filter name}
configure log filter name [add | delete] {exclude} events [event-condition | [all | event-component] {severity severity {only}}]
configure log filter name [add | delete] {exclude} events [event-condition | [all | event-component] {severity severity {only}}] [match | strict-match] type value