Hi,
Can you elaborate on what exactly "correlate X number of successful
logins in a given time" means?
For example you want to have all successful login events for each user
merged into a new event every N seconds or you want to alert/log if the
user login count exceeds X over a specific interval?
Hi,
This tests whether the field is an empty string:
$FileName == ''
On the other hand you should use the following:
if defined $FileName
An undefined field does not equal to a field containing an empty string.
Regards,
Botond
On Fri, 3 Jan 2014 18:32:21 -0200
Ricardo Brandão wrote:
> Hi Bo
I need to report if there is greater than 3 successful logins for a given
account within 45 seconds. I have read over the pm_evcorr section of the
documentation and now I'm confused. I have tried the following configuration
and it resulted in two logs with the same information in both of them - 1
l
Hello,
I'd like to thank to those few who responded and volunteered. This is
still open so feel free to send it along if you haven't done so.
Happy logging in 2014!
Regards,
Botond
> Hello,
>
> The nxlog website will receive an overhaul in the near future as it is
> quite shitty in my opinion
I am attempting to rotate some logs based on size and am using the following
from the example in the nxlog documentation
91 Execif jbossOut->file_size() > 5M { \
92 $newfile = "%JBOSSDIR%/" + $Hostname +
"/" + $Hostname + "-" + $dst + "-" strftim
Hi,
Because the backslash escapes the linebreaks, lines 91-95 are fed into
the evaluator as a single line.
If you do the same in a text editor, i.e. convert this into a single
line, and then go to the location stated in the error message (character
position 141), you should find the cause of the s
Thank you very much, I actually prefer to find the problems myself and it's
amazing what can happen when you miss a little + :))
-Original Message-
From: Botond Botyanszki [mailto:b...@nxlog.org]
Sent: Monday, January 06, 2014 11:16 AM
To: nxlog-ce-users@lists.sourceforge.net
Subject: Re:
Now that this is out of the way, the developers that use these JBoss logs
have asked if they can be rotated every 6 hours or 300M - which ever comes
first, obviously I just fudged my way through the size portion of this
request. Is it as simple as adding a Schedule block to that Output block for
ro
