Hi John Excellent article!
The mentioned chapters handle positive rules, based on events. I guess they won't work without an event? In my setup I'd like to figure out whether or not zero or more events were seen in a sliding time window. E.g. "Did system <A> sent at least 5 messages during the last 3600s ?" Kind regards Sven Am 30.04.2010 um 18:05 schrieb John P. Rouillard: > > In message <v2rb9abceeb1004300348h215422cagec1b85cbe0f8d...@mail.gmail.com>, > Sven Leupold writes: >> I wonder how I could implement a rule that triggers an action if a >> pattern did not appear OR less than MIN times for a time period n. > > Does: > > http://www.cs.umb.edu/~rouilj/sec/sec_paper_full.pdf > > sections 3.4 or 3.5.2 help? > > -- > -- rouilj > John Rouillard > =========================================================================== > My employers don't acknowledge my existence much less my opinions. ------------------------------------------------------------------------------ _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
