When I post my message on the board I said
>    perl sec.pl -conf=bsd-USERACT.sec -input=testlog

>I get
>    SEC (Simple Event Correlator) 2.5.3
>    Reading configuration from bsd-USERACT.sec
>    5 rules loaded from bsd-USERACT.sec
>    Stdin connected to terminal, SIGINT can't be used for changing the logging 
> level
>and cursor is sitting at the bottom.

My input file is testlog where I copied part of log file into it.  It has about 
10 lines of actual log.  Somehow SEC is not processing it.  Do I need to add 
special character into testlog file to say that it is end of the file.?

Thanks

> Date: Fri, 11 Dec 2009 11:04:58 +0200
> From: risto.vaara...@seb.ee
> To: cedrick...@hotmail.com
> CC: simple-evcorr-users@lists.sourceforge.net
> Subject: Re: [Simple-evcorr-users] help
> 
> On 12/11/2009 01:56 AM, Cedrick Kim wrote:
> > Can I add more than one file as input such as -input=file1 \
> > -input=file2 and so on. How many files can I input at once?
> >
> 
> as many as you want -- there is no limit set in the SEC code.
> BR,
> risto
> 
> > Thank you for your help
> >
> > Cedrick
> > ------------------------------------------------------------------------
> > Windows LiveT Hotmail is faster and more secure than ever. Learn more.
> > <http://www.microsoft.com/windows/windowslive/hotmail_bl1/hotmail_bl1.aspx?ocid=PID23879::T:WLMTAGL:ON:WL:en-ww:WM_IMHM_1:092009>
> >
> >
> >
> > ------------------------------------------------------------------------------
> > Return on Information:
> > Google Enterprise Search pays you back
> > Get the facts.
> > http://p.sf.net/sfu/google-dev2dev
> >
> >
> >
> > _______________________________________________
> > Simple-evcorr-users mailing list
> > Simple-evcorr-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
> 
                                          
_________________________________________________________________
Your E-mail and More On-the-Go. Get Windows Live Hotmail Free.
http://clk.atdmt.com/GBL/go/171222985/direct/01/
------------------------------------------------------------------------------
Return on Information:
Google Enterprise Search pays you back
Get the facts.
http://p.sf.net/sfu/google-dev2dev
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to