On 02/07/2014 09:07 AM, andrewarnier wrote: > My C3.4.01.conf: > > # Example C3.4.01.conf > > # Recognize any pattern and write to a FIFO. > > # > > type=Single > > ptype=RegExp > > pattern=(.*) > > desc=$0 > > action=write /home/Andrew/SEC_fifo %s > > when I run Run with: > > $ perl /usr/local/sbin/sec.pl -conf=C3.4.01.conf -input=- > > I got the error “Can't open pipe /home/ Andrew /SEC_fifo for writing > event 'this is'!” > > The example as follow: > > $ perl /usr/local/sbin/sec.pl -conf=C3.4.01.conf -input=- > > SEC (Simple Event Correlator) 2.4.1 > > Reading configuration from C3.4.01.conf > > 1 rules loaded from C3.4.01.conf > > this is > > Writing event 'this is' to file SEC_fifo > > Can't open pipe SEC_fifo for writing event 'this is'! > > Anyone knows what happened? > > Andrew
Provided that the pipe exists, this error most likely means that there are no readers at the pipe. Try running /bin/cat /home/Andrew/SEC_fifo and see if the result is different. Also, you are using an old version of SEC which does not handle fifos as efficiently as newer versions. Older versions open and close the fifo at each write, while the latest versions open all output files and sockets just once and keep the files/sockets open across all writes. For this reason, I would recommend to use the newest 2.7.4 or 2.7.5 versions for monitoring your logs. kind regards, risto > > > > ------------------------------------------------------------------------------ > Managing the Performance of Cloud-Based Applications > Take advantage of what the Cloud has to offer - Avoid Common Pitfalls. > Read the Whitepaper. > http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk > > > > _______________________________________________ > Simple-evcorr-users mailing list > Simple-evcorr-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users > ------------------------------------------------------------------------------ Managing the Performance of Cloud-Based Applications Take advantage of what the Cloud has to offer - Avoid Common Pitfalls. Read the Whitepaper. http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
