Hello, can you help me?
I need to count occours 'bar' for host1, host2 etc... (independently).
But I must ignore fist n (for example first 3) occurs 'bar' after 'foo'
In other words I need count video errors (bar), but exclude 3 video errors
after each channel change (foo).
But if 'foo' occurs the fourth time and more for host, action must be
executed.
So if: I have a logfile with:
0 host1: foo
1 host1: bar
2 host1: bar
3 host1: bar
0 host1: foo
1 host1: bar
0 host1: foo
0 host1: foo
1 host1: bar
nothing happen
but If:
0 host1: foo
1 host1: bar
2 host1: bar
3 host1: bar
4 host1: bar < trigger action
5 host1: bar < trigger action
0 host1: foo
1 host1: bar
etc.
Is is possible with sec?
How to do that?
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
