In message <008a01cf3d04$b06b2890$114179b0$@gmail.com>, "andrewarnier" writes:
>type=PairWithWindow >ptype=RegExp >pattern=CI-15600 Carrier Loss On The LAN in FAC-(.+)-(.+) >\(majorServiceAffecting\),ifIndex=(.+) I only see 3 captured patterns not 5. One after "FAC-", one after the second "-" after "FAC-" and one after "ifIndex". >desc=Carrier Loss On The LAN in FAC-$1-$2 >action=write - Carrier Loss On The LAN in FAC-$1-$2 ,ifIndex=$3 and the three captured patterns are correctly used here. >ptype2=RegExp >pattern2=CN-15600 Transport Layer Failure in FAC-(.+)-(.+) >\(majorServiceAffecting\),ifIndex=(.+) This pattern also has only 3 captured patterns. So there will not be a $4, or $5. >desc2= Transport Layer Failure in FAC-$4-$5 >\(majorServiceAffecting\),ifIndex=$6 None of these exist. If you want these fields to be from pattern2, use $1, $2 and $3. If you want these fields from pattern use %1, %2 and %3. >action2=pipe '%t,CI-15600 <> CN-15600,TCP-15454 Carrier Loss On The LAN >FAC-%1-%2 ifIndex=%3 and CN-15600 Transport Layer Failure FAC-%4-%5' >/bin/mail -s "Carrier Loss On The LAN" andrewarn...@gmail.com >window=5 > >I have match variables in the PairWithWindow rule ,but I can't get %4 and >%5 values -- -- rouilj John Rouillard =========================================================================== My employers don't acknowledge my existence much less my opinions. ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/13534_NeoTech _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users