[Simple-evcorr-users] email messages as an input?

2009-06-11 Thread Don Faulkner
as that file grows. Eventually, it will have to rotate, which I assume I could just handle with standard Linux/Solaris log-rotation tools. Ideally, the interesting lines in the email would end up in syslog or some such place for uniformity as well. Am I going down the right path? -- Don Faulkner

Re: [Simple-evcorr-users] detecting LDAP authentication failures (long)

2009-04-20 Thread Don Faulkner
the end of the connection. # Destroy the contexts just to be sure. type=Single ptype=RegExp pattern=conn=(\d+) .* - closing - context=LDAP_CONN_$1 desc=[conn=$1] LDAP session closed action=delete LDAP_CONN_$1; delete LDAP_CONN_$1_UID #action=delete LDAP_CONN_$1 -- Don Faulkner dfaulk...@pobox.com

[Simple-evcorr-users] Extracting data from a context

2009-04-14 Thread Don Faulkner
=logonly authentication failed for LDAP_CONN_$1['UID'] from LDAP_CONN_$1['IP'] (conn=$1) or, alternatively, put that in the desc= line, and use a simple action=logonly Am I even going about this the right way? -- Don Faulkner dfaulk...@pobox.com

[Simple-evcorr-users] detecting LDAP authentication failures (long)

2009-04-13 Thread Don Faulkner
=conn=(\d+) .* - closing - context=ldap_conn_$1 desc=LDAP session closed for $1 action=delete ldap_conn_$1 -- Don Faulkner dfaulk...@pobox.com -- This SF.net email is sponsored by: High Quality Requirements in a Collaborative