hi Stuart,
I just saw a post with almost the same question as the previous one
(perhaps it was posted before my answer reached your mailbox), and my
apologies if information in this email is redundant.
>
> Correction -- this also produces the same error
>
> But this does not:
> # - Radius Aut
Correction -- this also produces the same error
But this does not:
# - Radius Auth Failure -
#
type=SingleWithSuppress
ptype=regexp
pattern=T(\d\d:\d\d:\d\d).*? (.*?) poll-radius.*?Radius auth request against
(.*?) failed
desc=$3 Radius auth request failed
action=write /home/tocops/.tocpi
Thank you Risto
--sk
-Original Message-
From: Risto Vaarandi
Sent: Tuesday, March 16, 2021 3:57 PM
To: Stuart Kendrick
Cc: simple-evcorr-users@lists.sourceforge.net
Subject: Re: [Simple-evcorr-users] executing multiple actions
CAUTION: This email originated from outside the Allen Inst
hi Stuart,
if you want to specify multiple actions for the 'action' field of the
rule, semicolon should indeed be used as a separator. However, the
'action' keyword with an equal sign should appear just once in the
beginning of the rule field definition. Therefore, the example rule
from your post
I am struggling to execute multiple actions. I don't see mention of how to
execute multiple actions in the sec man page
http://simple-evcorr.github.io/man.html ... but from this page:
http://simple-evcorr.sourceforge.net/SEC-tutorial/article.html
I believed that separating actions with semi-colo
