I want to do a 'alert if more than X events in Y min' type of thing, but 
with the resulting alert containing the logs of the X events.

I know that I can do something along the lines of

if event
add log message to context (with an expiration of the context)

if more than X event in Y  min
send report

but my problem is that these events are continuing to arrive all the time, 
so if I append the log message to the context and update the expiration of 
the context to a later time, _every_ instance of the event will end up in 
the report, and the context will grow without bound.

is there any way to just report on the events that happened within the 
window?

David Lang

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to