Hi,

I ´m trying to launch two patterns from a jump rule and i dont know why is
not working. I have 6 files for processing my logs.

===================================================================
Common files to those alerts
===================================================================

Main.conf-->Parse every log.
__________________________________________________________________________

rem      = My logs
type     = Jump
ptype    = RegExp
desc     = $0
continue = Takenext
pattern  = (\d+)
varmap   = nd002;nd003;log=0;data=1;
cfset    = number

router.conf-->Condition in the alerts to launch each alert depending on the
number
___________________________________________________________________________

type      = Options
joincfset = number
procallin = no


rem      = Numbers
type     = Jump
ptype    = Cached
continue = TakeNext
context  = $+{data} ->(sub{$_[0] =~ /21|25|75/})
pattern  = nd002|nd003------------------------------------->Here i don´t
why i can´t launch both patterns to
                                launch the rest of the files. Only i can
launch 1.
cfset    = nd002-filters nd003-filters


====================================================================


====================================================================
Alert 1
====================================================================


nd002fil.conf-->Filter some numbers
____________________________________________________________________________

type      = Options
joincfset = nd002-filters
procallin = no


type    = Jump
ptype   = Cached
continue = TakeNext
pattern = nd002
cfset   = nd002-Alert


nd002.conf-->Show the number
____________________________________________________________________________

type      = Options
joincfset = nd003-Alert
procallin = no

type    = Single
ptype   = Cached
desc    = -
pattern = nd003
continue=TakeNext
action  = eval %o (\
print "Number:$+{data}";\


====================================================================
Alert 2
====================================================================

nd003fil.conf-->Filter some numbers
___________________________________________________________________________

type      = Options
joincfset = nd003-filters
procallin = no

type=Suppress
ptype=RegExp
pattern=nd003
context= $+{data} ->(sub{$_[0] =~ /25/})


type    = Jump
ptype   = Cached
continue = TakeNext
pattern = nd003
cfset   = nd003-Alert

nd003.conf-->Show the number
____________________________________________________________________________

type      = Options
joincfset = nd003-Alert
procallin = no

type    = Single
ptype   = Cached
desc    = -
pattern = nd003
continue=TakeNext
action  = eval %o (\
print "Number:$+{data}";\


Thank you. Regards.
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785111&iu=/4140
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to