In message
<eddf5556138a864f836192f6d101812a110e1...@fmsmsx104.amr.corp.intel.c
om>, "Boyles, Gary P" writes:
>Is there a formal description of the "EventGroup" rule?
> [...]
>But was wondering if there is a formal description of the rule (like
>the Linux man pages details for other rules).
>
>If there is not... may I suggest it be added to the formal documentation.
>
>If there is already a description - could I please get the pointer to it.
It's in my mn page at least under EVENTGROUP RULE
The EventGroup rule runs event correlation operations for counting
repeated instances of N different events e1,...,eK during T seconds,
and taking an action if threshold conditions c1,...,cN for *all* events
...
Maybe you have an old version of SEC (prior to 2.6.1 IIRC) or multiple
versions of SEC installed and are looking at the wrong man page?
--
-- rouilj
John Rouillard
===========================================================================
My employers don't acknowledge my existence much less my opinions.
------------------------------------------------------------------------------
LogMeIn Central: Instant, anywhere, Remote PC access and management.
Stay in control, update software, and manage PCs from one command center
Diagnose problems and improve visibility into emerging IT issues
Automate, monitor and manage. Do more in less time with Central
http://p.sf.net/sfu/logmein12331_d2d
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
