Hi,
I'm new to SEC and have one problem I'm hoping can be solved within SEC.
I want to load a (hash) table on SEC startup that contains the host (e.g.
foobar.x.y.com) as the key, and a value such as location (e.g.
site.building.room.row.rack).
So... for 100 hosts I'd have a hash-array where I access the location of each
host, and then use that for additional processing.
I'd like to be able to load this table on startup, and then use it for all my
events (for given patterns).
Possibly via a context expression/mini-program???
I assume this could be setup with an SEC_STARTUP event, but a real-life example
would be most helpful.
Thanks.
GaryB
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
