In message <caozhbryuo4a37gnalyhgxusbj-whjgbaj_y1f9-an6hxtm6...@mail.gmail.com>
,
Rajesh M writes:
>Hi Risto,
>
>As you pointed out, we couldn't able to implement all the functionality
>with SEC while giving non real-time inputs.
>
>We had integrated the SEC with our running cluster so that SEC will run as
>a background process all the time and takes the real-time system logs as
>inputs for processing.
>
>Right now as part of testing we are running SEC with only one .conf file
>with few rules in it and passing this real-time syslogs as inputs.
>
>But, in future we have more .conf files like sshd.conf, restart.conf,
>link_down.conf, etc....etc.
>
>We are in way to customize SEC that, it will take all the .conf's files at
>a time and start processing the inputs coming from the cluster.
>
>Are there any ways in implementing the above functionality in SEC?, if not
>please suggest us the alternatives to achieve this.


In the man page it describes how to use wildcards with the conf option:

  The matching order is determined by the order of configuration files
  in SEC command line. For example, if the Perl glob() function
  returns filenames in ascending ASCII order, and configuration files
  /home/risto/A.conf, /home/risto/B.conf2, and /home/risto/C.conf are
  specified with --conf=/home/risto/*.conf --conf=/home/risto/*.conf2
  in SEC command line, then SEC first matches the input against the
  rule sequence from A.conf, then from C.conf, and finally from
  B.conf2.

Please read the man page and tell us what part of that does not fill
your need?

Naming the files 01sshd.conf 02restart.conf etc. is an easy way of
forcing the order.

--
                                -- rouilj
John Rouillard
===========================================================================
My employers don't acknowledge my existence much less my opinions.

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to