hi all,

SEC version 2.8.3 has been released, and here is the change log for the new
version:

* added support for collecting rule performance data, and the --ruleperf
and --noruleperf command line options.

* improved dump file generation in JSON format (some numeric fields that
were reported as JSON strings are now reported as JSON numbers).

The new version can be downloaded from SEC home page (here is the link for
downloading it directly:
https://github.com/simple-evcorr/sec/releases/download/2.8.3/sec-2.8.3.tar.gz
).

Version 2.8.3 introduces the --ruleperf command line option which enables
performance data (CPU time) collection for rules, with performance data
being reported in the dump file. The CPU time reported for the rule does
not only reflect the cost of matching the rule against input events, but
all processing cost. For example, if there is a frequently matching Single
rule, its CPU time also includes the cost of executing rule action list.

Thanks to John Rouillard for suggesting the rule performance profiling
feature!

kind regards,
risto
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to