how correctly write event syslog pattern
if i want to catch debug isdn q931 events:
No circuit/channel available
Resource unavailable, unspecified
event syslog pattern ".*Call rejected.*No circuit/channel available.*Resource unavailable, unspecified.*Unallocated/unassigned number"
but it don't work.
If you want one policy to match all messages, you want something like:
event syslog pattern "Cause i =.*(Call rejected|No circuit/channel available|Resource unavailable, unspecified|Invalid information element contents|Switching equipment congestion|Unallocated/unassigned number)"