Hi Cedrick:
In message <blu137-w1971425fa432753057014389...@phx.gbl>,
Cedrick Kim writes:
>I down loaded and executed command
>
> perl sec.pl -conf=bsd-USERACT.sec -input=testlog
>
>I get
> SEC (Simple Event Correlator) 2.5.3
> Reading configuration from bsd-USERACT.sec
> 5 rules loaded from bsd-USERACT.sec
> Stdin connected to terminal
> SIGINT can't be used for changing the logging level
>and cursor is sitting at the bottom.
Right, it's waiting for lines to be appended to the file testlog.
>If I exexute
>perl sec.pl -conf=bsd-USERACT.sec -input=- and I type in context
>it is working as what it supposed to be.
In this case stdin rather than testlog is used as the input file, so
when you type at the keyboard you are typing to stdin and sec sees
your keystrokes.
>Can you help me what I am doing wrong?
Well if there is no data being added to the testlog file, that could
be a problem.
>Can I add more than one file as input such as -input=3Dfile1
> \ -input=3Dfile2 and so on.
Yes.
>How many files can I input at once?
I have had 15, I am not sure if there is a maximum number.
--
-- rouilj
John Rouillard
===========================================================================
My employers don't acknowledge my existence much less my opinions.
------------------------------------------------------------------------------
Return on Information:
Google Enterprise Search pays you back
Get the facts.
http://p.sf.net/sfu/google-dev2dev
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
