Hi,
I can´t use metacpan modules or CygWin and also i can´t update.
Here is a link to Tail implementation in perl if someone need it:
http://search.cpan.org/~mgrabnar/File-Tail-0.99.3/Tail.pm
I made a flow chart to accomplish:
https://drive.google.com/file/d/0BzGAeQ7Jnta6MnJYcHI3RzJlY00/view?usp=sharing
I don´t know how to achive this.
I have another question. How can i delete all context from a specific
alert? or specific context using regex from context hash?
Thank you. Regards.
2016-12-15 15:18 GMT+01:00 Risto Vaarandi <risto.vaara...@gmail.com>:
> Is my understanding correct that you would like to add new dynamic
> input sources (something which are not defined in commandline), after
> a specific event has been observed?
>
> If so, I would recommend to use spawn or cspawn action. For example,
> you could run the following action when a matching event appears
> (works on Linux with gnu tail):
> spawn tail -n +1 -q -f /path/to/dynamic/sources/*.log
>
> The above command would output all lines in given files and would
> continue to tail those files for new lines, so that the lines would
> appear as synthetic events for sec.
>
> I am not sure, however, whether Strawberry perl allows to run the
> 'spawn' action, and what could be the best replacement for the 'tail'
> utility on windows platform. As for the open_input() function in the
> sec code, it does not support any custom input file lists as a
> function parameter which the user could manipulate.
>
> Like before, I would again recommend to run sec with CygWin perl on
> windows. Cygwin not only allows you to use all the features of sec on
> windows, but it also offers many UNIX tools which might prove handy
> for addressing specific tasks (like the aforementioned 'tail'
> utility).
>
> kind regards,
> risto
>
>
> 2016-12-15 14:35 GMT+02:00 Jaren Peich <burkol...@gmail.com>:
> > I missed to say that the path is different from the input path of sec.
> >
> > Thank you again.
> >
> > 2016-12-15 13:27 GMT+01:00 Jaren Peich <burkol...@gmail.com>:
> >>
> >> Hi,
> >>
> >> I have a doubt how can i do it this task.
> >>
> >> I´m using Strawberry Perl and Sec 2.6.2 on a windows platform.
> >>
> >> I want to restart the reading a group of files from the beginning
> throught
> >> regexp path when a rule is validated.
> >>
> >> Previusly i need to restart files not opened before:
> >>
> >> lcall %o -> ( sub { main::open_input(0,1); } )
> >>
> >> I want to send find a way to "pass" or something to restart a specific
> >> path of files (C:\Logs\*\*.log).
> >>
> >> Thank you. Regards.
> >>
> >>
> >>
> >>
> >
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
