Re: [Simple-evcorr-users] Accessing A Perl Hash From Pattern1 In Pattern 2

2019-10-04 Thread David Thomas
Hi Rock Thank you! That is much simpler than what I was trying to do. So in general, % in the second pattern takes the value of $ from the first pattern? From: MILLS, ROCKY Sent: Thursday, October 3, 2019 5:50 PM To: 'simple-evcorr-users@lists.sourceforge.net

Re: [Simple-evcorr-users] Accessing A Perl Hash From Pattern1 In Pattern 2

2019-10-04 Thread MILLS, ROCKY
Hi David, Last night I only tested for a single event with a matching follow up event. This morning I tested with two different events for the first pattern and two correlating events to follow. I was missing the proper event correlation (desc) and (desc2) to line up the first event with the m

Re: [Simple-evcorr-users] Accessing A Perl Hash From Pattern1 In Pattern 2

2019-10-04 Thread Risto Vaarandi
hi David, I would second to Rock's recommendation to use regular expressions in the Pair rule. Firstly, two PerlFunc patterns implement only regular expression matching and there isn't anything additional (such as arithmetic operations) which would require the use of Perl. Therefore, it is easier

[Simple-evcorr-users] Close input file if there are now events after specified duration

2019-10-04 Thread Alberto Corton Padilla
Hi, Is there a way to close an input file if no new lines have been written for a specified duration? Regards, ___ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-us

Re: [Simple-evcorr-users] Close input file if there are now events after specified duration

2019-10-04 Thread Risto Vaarandi
hi Alberto, if the input file has been provided to SEC with --input command line option, there is currently no way to close it. (It is only possible to increase the status polling time frame for input files with --check-timeout option, in order to reduce the system load if there is a large number