Re: [Simple-evcorr-users] Count report event number

2011-08-13 Thread david
SEC works just fine reading from named pipe or stdin from a socket. I have this working with rsyslog with the only problem being that when I want to change the SEC rules, it involves a restart of rsyslog. David Lang On Sat, 13 Aug 2011, Jean Baptiste Favre wrote: - second is: in order to

Re: [Simple-evcorr-users] Count report event number

2011-08-13 Thread John P. Rouillard
In message alpine.deb.2.02.1108130922050.6...@asgard.lang.hm, da...@lang.hm writes: SEC works just fine reading from named pipe or stdin from a socket. I have this working with rsyslog with the only problem being that when I want to change the SEC rules, it involves a restart of rsyslog. Hmm,

Re: [Simple-evcorr-users] Count report event number

2011-08-13 Thread Jean Baptiste Favre
Hello David, Thanks for your answer. Could it be possible to get a sample configuration example ? I have some problems to exactly figure out how it could work. From what you said, it seems that socket is owned by sec and rsyslog write to it, which could explain why you have to restart rsyslog

Re: [Simple-evcorr-users] Count report event number

2011-08-13 Thread david
On Sat, 13 Aug 2011, John P. Rouillard wrote: In message alpine.deb.2.02.1108130922050.6...@asgard.lang.hm, da...@lang.hm writes: SEC works just fine reading from named pipe or stdin from a socket. I have this working with rsyslog with the only problem being that when I want to change the