Thanks John Rouillard :) Thanks and Regards, Mohan.R M Mobile: +91 779 584 1059 E-mail: ramasamy.mo...@hp.com
-----Original Message----- From: John P. Rouillard [mailto:rou...@cs.umb.edu] Sent: Thursday, September 11, 2014 6:58 PM To: Mohan, Ramasamy Cc: simple-evcorr-users@lists.sourceforge.net Subject: Re: [Simple-evcorr-users] Need clarification on your FAQ#15 Hello: In message <3c0e2c63a7813e4985ae136835381091470...@g1w3645.americas.hpqcorp.net >, "Mohan, Ramasamy" writes: > I running the below rule which I have found in > http://simple-evcorr.sourceforge.net/FAQ.html#15 and Running in CYGWIN > perl , getting following error. >Code: filename is cs2.txt >=================== >type=Single >ptype=SubStr >pattern=SEC_STARTUP >context=SEC_INTERNAL_EVENT >continue=TakeNext >desc=Load the Storable module and terminate if it is not found >action=assign %ret 0; eval %ret (require Storable); \ > eval %ret (exit(1) unless %ret) Works for me: ====== rouilj ~/tmp> uname CYGWIN_NT-6.1-WOW64 rouilj 1.7.32(0.274/5/3) 2014-08-13 23:03 i686 Cygwin rouilj-THINK ~/tmp> cat foo type=Single ptype=SubStr pattern=SEC_STARTUP context=SEC_INTERNAL_EVENT continue=TakeNext desc=Load the Storable module and terminate if it is not found action=assign %ret 0; eval %ret (require Storable); \ eval %ret (exit(1) unless %ret) rouilj ~/tmp> /tools/sec/bin/sec -conf foo -log 6 -intevents SEC (Simple Event Correlator) 2.7.2 Reading configuration from foo 1 rules loaded from foo Stdin connected to terminal, SIGINT can't be used for changing the logging level Creating SEC internal context 'SEC_INTERNAL_EVENT' Creating SEC internal event 'SEC_STARTUP' Assigning '0' to variable '%ret' Evaluating code 'require Storable' and setting variable '%ret' Variable '%ret' set to '1' Evaluating code 'exit(1) unless 1' and setting variable '%ret' Variable '%ret' set to '1' Deleting SEC internal context 'SEC_INTERNAL_EVENT' ======= and sec just sits there waiting for an input line. So you have Storable installed? Does perl -e "require Storable;" generate an error? In a following message you complain about an error in: >type=Single >ptype=SubStr >pattern=SEC_STARTUP >context=SEC_INTERNAL_EVENT >desc=Restore all SEC contexts from /tmp/SEC_CONTEXTS on startup >action=lcall %ret -> ( sub { %main::context_list = \ > %{Storable::retrieve("/tmp/SEC_CONTEXTS")}; } ) Calling code 'CODE(0x600871698)' and setting variable '%ret' Code 'CODE(0x600871698)' runtime error: Undefined subroutine &Storable::retrieve called at (eval 3) line 1. If the 'require Storable;' failed obviously this is going to fail as well. Have a good day. -- -- rouilj John Rouillard =========================================================================== My employers don't acknowledge my existence much less my opinions. ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users