Event Inheritance

Event inheritance is an advanced feature of Klogger, enabling analysts the definitions of inclusive groups of events, thereby defining different log levels.

The inheritance model, allows schema authors to specify the levels of the various events logged by Klogger and include log levels in other log levels using the ``include'' command.

Similar to C++ syntax, the currently used log level will be declared before all log level declarations with the ``using'' command.

Furthermore, when a schema author would like to omit an event from an included log level, he may use the ``omit'' command. Such action could be done in order to filter out information unneeded in a specific log level, thereby reducing the information generated by Klogger.

Event inheritance syntax is as follows:

using two

loglevel one <
   event ONE_DO {
     ...
   }

   event ONE_SIMPLE {
     ...
   }
>

loglevel two <
   include one

   omit ONE_SIMPLE

   event TWO_DETAILED {
     ...
   }
>

A more detailed example of log levels can be found in the network schema's configuration file.