Re: [Simple-evcorr-users] action-list checking if log file is already open by SEC

2020-02-20 Thread Risto Vaarandi
hi Richard, I think this scenario is best addressed by creating a relevant SEC context when 'addinput' action is called. In fact, handling such scenarios is one of the purposes of contexts, and here is an example rule which illustrates this idea: type=single ptype=regexp pattern=start monitoring

[Simple-evcorr-users] action-list checking if log file is already open by SEC

2020-02-20 Thread Richard Ostrochovský
Hello Risto and friends, having mechanism for dynamic opening (addinput) and closing (dropinput) files, I would like to be able to check, if the file is already opened, before trying to open it again, to avoid it. That way I would like to eliminate this error message from SEC log (present also in

Re: [Simple-evcorr-users] How to introduce new match variable

2020-02-20 Thread Dusan Sovic
Hi Risto, Thank you for your explanation. All works well for me now. I using SEC v 2.7.12 therefore I see that compilation error with lcall and :> operator. Thank you, Dusan Od: Risto Vaarandi Odoslané: streda 19. februára 2020 14:52 Komu: Dusan Sovic Kópia: