Re: [Simple-evcorr-users] Input field within rule definition

2011-04-07 Thread Risto Vaarandi
On 04/05/2011 11:54 PM, MILLS, ROCKY (ATTSI) wrote: For discussion only -- not an immediate need to be addressed. ~ Well, the 'input' field looks like a synonym to the file context to me... Maybe I haven't got all the details for the 'input' field, though. However, there is one danger

Re: [Simple-evcorr-users] Input field within rule definition

2011-04-07 Thread MILLS, ROCKY (ATTSI)
:27 AM To: simple-evcorr-users@lists.sourceforge.net Subject: Re: [Simple-evcorr-users] Input field within rule definition On 04/05/2011 11:54 PM, MILLS, ROCKY (ATTSI) wrote: For discussion only -- not an immediate need to be addressed. ~ Well, the 'input' field looks like a synonym

[Simple-evcorr-users] Input field within rule definition

2011-04-05 Thread MILLS, ROCKY (ATTSI)
For discussion only -- not an immediate need to be addressed. ~ For some rule sets I've defined context per multiple files per the SEC command line options. E.g. -input=/app/myapp/log/my.log=mylog. In this way I can specify rules per specific files by simply using the defined context such as