hi all, SEC-2.7.alpha2 has been released and can be downloaded at http://sourceforge.net/projects/simple-evcorr/files/sec/2.7.alpha2/sec-2.7.alpha2.tar.gz/download
This release includes some improvements discussed in the list during the last month, including better SIGINT handling, dump file format change for highlighting frequently matching rules, but also a small fix for syslog logging. Also, I take the opportunity and wish all list members all the best for 2013. kind regards, risto On 11/26/2012 11:55 AM, Risto Vaarandi wrote: > hi all, > > the first alpha version of SEC-2.7 has been released and is available at > http://sourceforge.net/projects/simple-evcorr/files/sec/2.7.alpha1/sec-2.7.alpha1.tar.gz/download > > It has quite many new features, including 14 new actions which allow for > more advanced operations on contexts, but also conditional execution > with if-action and loops with while-action. > > PerlFunc patterns have been augmented with an opportunity to set named > match variables. For all pattern types which set match variables, > previously cached matches can be accessed with $:{entry:var} syntax. > Also, context expressions accept the new :> operator for passing > references to pattern match cache entries directly to Perl subroutines. > > Not all features which I had in mind or which were discussed in the > mailing list were implemented. In fact, when writing the first alpha > release, I created 3-4 different implementations with different feature > sets enabled, and benchmarked them against larger event volumes. The > testing clearly revealed that some features would decrease the > performance of the tool by 10-15%, and enabling them all would impose a > hard penalty on all users. Therefore I opted a more conservative > approach and implemented only those things which add true value to the > end user without sacrificing performance. > > Finally, I'd welcome any help with testing the new alpha release! > > with kind regards, > risto > > ------------------------------------------------------------------------------ > Monitor your physical, virtual and cloud infrastructure from a single > web console. Get in-depth insight into apps, servers, databases, vmware, > SAP, cloud infrastructure, etc. Download 30-day Free Trial. > Pricing starts from $795 for 25 servers or applications! > http://p.sf.net/sfu/zoho_dev2dev_nov > _______________________________________________ > Simple-evcorr-users mailing list > Simple-evcorr-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users > ------------------------------------------------------------------------------ Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS, MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft MVPs and experts. ON SALE this month only -- learn more at: http://p.sf.net/sfu/learnmore_122712 _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
