hi Gary
it is possible, if you employ the EventGroup rule which is a
generalization of both SingleWithThreshold and SingleWithSuppress.
This question was asked about a year ago, so I will also post a link
to the relevant post:
http://sourceforge.net/mailarchive/message.php?msg_id=27913498
Shortly, the idea is to use EventGroup with a threshold 1, which
immediately anchors the event correlation window to the time moment
where the first event occurred. The following matching events will now
be suppressed during the given window, and the window will not slide
forward (the first event did the anchoring). However, since EventGroup
rule supports the 'count' field for executing an action at each
matching event, we can take advantage of this for incrementing a
counter on each hit. EventGroup also supports 'init' and 'end' fields
for executing actions on the beginning and end of the event
correlation window. Therefore, we can use 'init' for initializing the
counter, and 'end' for reporting its reading. Below, there is a simple
example which illustrates the discussion:
type=EventGroup
ptype=regexp
pattern=myevent
count=lcall %ret -> ( sub { ++$req; } );
desc=Suppress with count
action=write - the first event instance was seen
init=lcall %ret -> ( sub { $req = 0; } )
end=lcall %ret -> ( sub { return $req; } ); \
write - %ret events were seen
window=60
kind regards,
risto
2012/10/18 Boyles, Gary P <gary.p.boy...@intel.com>:
> Is there a way to conveniently get the repeat_count (i.e. count of events
> suppressed) for a SingleWithSuppress rule?
>
>
>
> Thanks.
>
>
>
> Gary Boyles
>
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_sfd2d_oct
> _______________________________________________
> Simple-evcorr-users mailing list
> Simple-evcorr-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
>
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
