Hi,
I ´m trying to launch two patterns from a jump rule and i dont know why is
not working. I have 6 files for processing my logs.
===================================================================
Common files to those alerts
===================================================================
Main.conf-->Parse every log.
__________________________________________________________________________
rem = My logs
type = Jump
ptype = RegExp
desc = $0
continue = Takenext
pattern = (\d+)
varmap = nd002;nd003;log=0;data=1;
cfset = number
router.conf-->Condition in the alerts to launch each alert depending on the
number
___________________________________________________________________________
type = Options
joincfset = number
procallin = no
rem = Numbers
type = Jump
ptype = Cached
continue = TakeNext
context = $+{data} ->(sub{$_[0] =~ /21|25|75/})
pattern = nd002|nd003------------------------------------->Here i don´t
why i can´t launch both patterns to
launch the rest of the files. Only i can
launch 1.
cfset = nd002-filters nd003-filters
====================================================================
====================================================================
Alert 1
====================================================================
nd002fil.conf-->Filter some numbers
____________________________________________________________________________
type = Options
joincfset = nd002-filters
procallin = no
type = Jump
ptype = Cached
continue = TakeNext
pattern = nd002
cfset = nd002-Alert
nd002.conf-->Show the number
____________________________________________________________________________
type = Options
joincfset = nd003-Alert
procallin = no
type = Single
ptype = Cached
desc = -
pattern = nd003
continue=TakeNext
action = eval %o (\
print "Number:$+{data}";\
====================================================================
Alert 2
====================================================================
nd003fil.conf-->Filter some numbers
___________________________________________________________________________
type = Options
joincfset = nd003-filters
procallin = no
type=Suppress
ptype=RegExp
pattern=nd003
context= $+{data} ->(sub{$_[0] =~ /25/})
type = Jump
ptype = Cached
continue = TakeNext
pattern = nd003
cfset = nd003-Alert
nd003.conf-->Show the number
____________________________________________________________________________
type = Options
joincfset = nd003-Alert
procallin = no
type = Single
ptype = Cached
desc = -
pattern = nd003
continue=TakeNext
action = eval %o (\
print "Number:$+{data}";\
Thank you. Regards.
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785111&iu=/4140
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users