Hi Cedrick,

I think you should check "fromstart" option, otherwise sec will wait for
new lines appended to testlog file.



Cedrick Kim escribió:
> When I post my message on the board I said
> >    perl sec.pl -conf=bsd-USERACT.sec -input=testlog
>
> >I get
> >    SEC (Simple Event Correlator) 2.5.3
> >    Reading configuration from bsd-USERACT.sec
> >    5 rules loaded from bsd-USERACT.sec
> >    Stdin connected to terminal, SIGINT can't be used for changing
> the logging level
> >and cursor is sitting at the bottom.
>
> My input file is testlog where I copied part of log file into it.  It
> has about 10 lines of actual log.  Somehow SEC is not processing it. 
> Do I need to add special character into testlog file to say that it is
> end of the file.?
>
> Thanks
>
> > Date: Fri, 11 Dec 2009 11:04:58 +0200
> > From: risto.vaara...@seb.ee
> > To: cedrick...@hotmail.com
> > CC: simple-evcorr-users@lists.sourceforge.net
> > Subject: Re: [Simple-evcorr-users] help
> >
> > On 12/11/2009 01:56 AM, Cedrick Kim wrote:
> > > Can I add more than one file as input such as -input=file1 \
> > > -input=file2 and so on. How many files can I input at once?
> > >
> >
> > as many as you want -- there is no limit set in the SEC code.
> > BR,
> > risto
> >
> > > Thank you for your help
> > >
> > > Cedrick
> > >
> ------------------------------------------------------------------------
> > > Windows LiveT Hotmail is faster and more secure than ever. Learn more.
> > >
> <http://www.microsoft.com/windows/windowslive/hotmail_bl1/hotmail_bl1.aspx?ocid=PID23879::T:WLMTAGL:ON:WL:en-ww:WM_IMHM_1:092009>
> > >
> > >
> > >
> > >
> ------------------------------------------------------------------------------
> > > Return on Information:
> > > Google Enterprise Search pays you back
> > > Get the facts.
> > > http://p.sf.net/sfu/google-dev2dev
> > >
> > >
> > >
> > > _______________________________________________
> > > Simple-evcorr-users mailing list
> > > Simple-evcorr-users@lists.sourceforge.net
> > > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
> >
>
> ------------------------------------------------------------------------
> Your E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up
> now. <http://clk.atdmt.com/GBL/go/171222985/direct/01/>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> Return on Information:
> Google Enterprise Search pays you back
> Get the facts.
> http://p.sf.net/sfu/google-dev2dev
>   
> ------------------------------------------------------------------------
>
> _______________________________________________
> Simple-evcorr-users mailing list
> Simple-evcorr-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
>   


-- 
Alberto Losada
S21sec - Dpto Integración productos propios

Tlf: 93 544 27 23
Móvil: 607 81 36 89

www.s21sec.com
La seguridad digital del futuro, Hoy.

La información contenida en este mail, así como los archivos adjuntos, es 
CONFIDENCIAL. Grupo S21sec Gestión, S.A. garantiza la adopción de las medidas 
necesarias para asegurar el tratamiento confidencial de los datos de carácter 
personal. En el caso de que el destinatario del correo no sea usted, le rogamos 
envíe una notificación al remitente y lo destruya de forma inmediata. La 
lectura y/o manipulación de esta información en la situación señalada 
anteriormente será considerada ilegal, permitiendo a la empresa remitente 
realizar acciones legales de diferente envergadura.


------------------------------------------------------------------------------
Return on Information:
Google Enterprise Search pays you back
Get the facts.
http://p.sf.net/sfu/google-dev2dev
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to