Hi, I am new to SEC, I am trying to have one rule that will apply to
multiple snmp traps, for instance
I would like the regex to match
.1.3.6.1.4.1.5528.100.10.2.8.0.1
.1.3.6.1.4.1.5528.100.10.2.8.0.2
.1.3.6.1.4.1.5528.100.10.2.8.0.3
etc
but I want have an action for each oid and if matches one it alerts ans
waits and if it matches the second do the same thing. I am trying to not
have a massive configuration file with a rule for each OID. I have it
working with a single OID see my example below.
type=SingleWithSuppress
continue=takenext
ptype=RegExp
pattern=SNMPv2-SMI::enterprises.5528.100.10.2.8.0.10
desc=Front Door Camera
action=pipe '"$0"' tr -d "\""|sed s/^/\"/g|sed s/$/\"/g|/root/sec-2.7.5/
alerthours.pl
window=900
Thanks!
--
Robert Reilly
------------------------------------------------------------------------------
"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos. Get
unparalleled scalability from the best Selenium testing platform available.
Simple to use. Nothing to install. Get started now for free."
http://p.sf.net/sfu/SauceLabs
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
