On 18/12/2009 2:44 PM, Rob McEwen wrote: > R-Elists wrote: >> here is a chance for possible help in more areas than just this specific >> ruleset issue... >> >> i asked Rob some time ago if he could write a script that would check logs >> and report if a certain rule was effective or not by itself vrs if other >> rules hit with it and maybe that rule was not needed or could be lowered etc
Well it doesn't report to alert people that a rule may not make much of a difference in the scheme of things, you can infer the information from ruleqa's score map output. Daryl