Re: [Simple-evcorr-users] Way to corelate 2 rules with treshold

2018-06-13 Thread Risto Vaarandi
hi Przemysław, I have provided my answers inline: Then i tried this to incorporate it into Your proposal as a separate rule > (inserted it right after the first rule). > # create context for changed messadeid preserving login > type=single > ptype=regexp > pattern=postfix\/smtp.*\]:

Re: [Simple-evcorr-users] Way to corelate 2 rules with treshold

2018-06-13 Thread Przemysław Orzechowski
Hi And thank You for fast and helpful answer. I needed to slightly modify the proposed rules bellow my fully working version (for now the action is left to write) An "dsn=5.x.x" (x-any numeric digit) always denotes a permanent error, so the text bounced is always there i removed ",

Re: [Simple-evcorr-users] Way to corelate 2 rules with treshold

2018-06-12 Thread Risto Vaarandi
hi Przemysław, for addressing this problem, you could divide it into several independent subtasks: 1) memorize the mapping from msgid to username, so that each mapping would exist for a certain amount of time 2) when a bounce event appears in the log, generate a synthetic event for the bounce, so