On Fri, 28 Apr 2006, Dan wrote:
> > It looks like it might have some interesting purposes. But for the
> > most part, I can't think of what you would use it for. I can't
> > think of a single example where SARE could have used this before.
>
> Actually, the way I expect to use it is more like:
>
> __test [A1 - A3]
> __test [B1 - B3]
> __test [C1 - C3]
> __test [D1 - D3]
>
> meta __META_A (__testA1 || __testA2 || __testA3)
[snip..]
> Still pretty new to SA, I'm in the middle of building my system and
> was hoping to find preexisting features I could simply build my
> configuration around. If micro weighting (.001) doesn't work, I'll
> make a feature request after deciding the best way to do what I'm
> after. Thinking about it today, my ideal would be:
>
> 1) An option to turn off scoring for specific tests WITHOUT turning
> off its event reporting. Perhaps a different prefix, like ++test
> instead of __test.
>
> AND
>
> 2) A logging system that records EVERY test involved for EVERY
> message scanned, that also allows me to locate the correct entry
> (with a text editor) when all I have is the Subject: or From: of a
> given message.
What about using the SA 'test rule' mechanism?
(IE use "T_testA1" rather than "__testA1").
Effectivly the micro weighting done automagically and in a standardized
way.
Read the SA conf documentation for details.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
