hi Rajeev, the scheme you have proposed (taking timestamps from an input file and using them to adjust an artificial clock) does not work with SEC as it has been explained in the documentation and this tutorial: https://simple-evcorr.github.io/SEC-tutorial.pdf. Implementing an artificial clock is not easy and involves a number of advanced issues. For example, the internal event correlation state is not only changing on the appearance of new input events, but also on the expiration of various timers (created and adjusted dynamically at runtime, and thus difficult to track). To make things worse, timestamps are not always increasing in log files (e.g., because of multi-threading of logging applications, but also issues like unsynchronized system clocks, etc.). As a result, artificial time will not always move forward, but can also move backwards. Therefore, to implement such an artificial clock would probably require a separate project, since it is less connected to real-time event correlation.
Also, can you post further questions to the mailing list as instructed in the SEC home page? (the list can be found here: https://sourceforge.net/p/simple-evcorr/mailman/simple-evcorr-users/) kind regards, risto Kontakt Rajeev Raut (R) (<raje...@openserve.co.za>) kirjutas kuupäeval R, 24. jaanuar 2025 kell 16:15: > > Hi Risto, > > > > I am typical support guy .. and have written few Domain Specific perl based > regex’s to get my job done.. in near real time (automations). > > > > I find it interesting that your tool sec might come handy in my efforts to > tackle further challenges w/o coding too much going forward. > > > > My problem is: > > > > I setup data in a file where say I keep some date/time part as data (that can > act like actual-time of the events) and the rest of the line.. as dummy > events to be handled by sec. I want sec to take this datee/time as if that is > the wall clock ? is it possible ? reason to do is – this way we can test far > more scenarios w/o really waiting for actual wall-clock. This will speedup > doing test-cases. > > > > Let me know. > > > > PS: Please keep related-work-groups (cbsadmingr...@telkom.co.za) in cc-list > for better response times, as we may get side-tracked due to other tasks. > > Stay safe. > > > > Regards > Rajeev Raut > Desk: +27 12 311 4086 > Cell: 081 569 3343 / 061 902 0808 > Meet your future today > > > > ===== This e-mail and its contents are subject to the Openserve (Pty) Ltd > E-mail legal notice > https://connect.openserve.co.za/assets/documents/LegalEmail/OpenserveEMailLegalNotice.pdf > ===== _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
