If assp is able to correct a bad regex or to ignore an invalid change -
this is not shown in the stats - because the used regex is OK.
The stats shows the running state not the configured!
>11-Sep-28 16:20:20 [Main_Thread] Warning: value for bombHeaderRe was not
changed - all changes are ignored
>11-Sep-28 16:20:20 [Main_Thread] Info: try to use unoptimized regex
bombHeaderRe
If you restart assp with this bad regex (in a file) - assp will not be
able to ignore changes - and will show this in the stats.
Thomas
Von: Michael Thomas <[email protected]>
An: ASSP development mailing list <[email protected]>
Datum: 28.09.2011 23:32
Betreff: [Assp-test] ASSP Worker/DB/Regex Status failed to detect
bad weighted regex
Thomas,
I inadvertently created a bad weight in a regex. Log snippet below. I
noted increased spam, but did not associate it with a bad regex for
about 48 hours. During that time, ASSP Worker/DB/Regex Status reported
healthy, with no failed regular expressions. I check it regularly.
Running version: ASSP version 2.0.2(3.0.03)
Yes, I am going to upgrade. Been really busy.
11-Sep-28 16:20:20 [Main_Thread] Error: weighted regex for bombHeaderRe
is invalid 'Hundred.?Day)~.?Loan=>100' - Unmatched ) in regex; marked by
<-- HERE in m/Hundred.?Day) <-- HERE ~.?Loan/ at C:\ASSP\assp.pl line
36924.
11-Sep-28 16:20:20 [Main_Thread] Warning: value for bombHeaderRe was not
changed - all changes are ignored
11-Sep-28 16:20:20 [Main_Thread] Info: try to use unoptimized regex
bombHeaderRe
--
Michael Thomas
Mathbox
978-687-3300
Toll Free: 1-877-MATHBOX (1-877-628-4269)
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
