Strike that, newbie mistake. It was a combination of not reading
carefully to see I needed the -intevents command-line option and also
the fact that 'use' doesn't return 1 like 'require' does.
type=single
desc=Set log file and addressee list
ptype=substr
pattern=SEC_STARTUP
context=SEC_INTERNAL_EVENT
action=eval %a (use POSIX qw(strftime););
type=single
desc=dynamic write
ptype=regexp
pattern=.?
action=eval %w (return strftime("/tmp/%Y-%m-%d.log",localtime());); \
write %w $0;
SEC (Simple Event Correlator) 2.5.3
Reading configuration from rules/other.sec
2 rules loaded from rules/other.sec
Stdin connected to terminal, SIGINT can't be used for changing the logging level
Creating SEC internal context 'SEC_INTERNAL_EVENT'
Creating SEC internal event 'SEC_STARTUP'
Evaluating code 'use POSIX qw(strftime);' and setting variable '%a'
No value received for variable '%a'
Deleting SEC internal context 'SEC_INTERNAL_EVENT'
foo
Evaluating code 'return strftime("/tmp/%Y-%m-%d.log",localtime());'
and setting variable '%w'
Variable '%w' set to '/tmp/2010-03-26.log'
Writing event 'foo' to file /tmp/2010-03-26.log
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
