Thanks to John Rouillard for your help so far. Another question on this rule.
The 1st pattern of this rule happens hundreds of times a day, while the second pattern only occurs if there is a system failure. In testing I have thrown many of the 1st patterns at SEC, then the second pattern. SEC outputs ALL of the data from each of the 1st pattern matches followed by 2nd pattern action. Is there a way to scan for the 1st pattern, then if/when the 2nd pattern is hit, throw out only the last match from pattern 1? Thanks again for the help everyone, - Reynold SEC: type=Pair ptype=RegExp pattern=^Message\:(.*)recipients to \|(\w+)\_(\d+)\_(.*) desc=ACCOUNT: $2 JOB: $3 action=logonly ptype2=RegExp6 pattern2=Type\s\:\s(System\.Net\.WebException)(.*)\nMessage\s\:\s(.*)\nS oure\s\:\s(.*)\nHelp\slink\s\:\s(.*)\nStatus\s\:\s(.*) desc2=JOB FAILED: $1 $3 %2 %3 action2=logonly LOG: ---------------------------------------- Timestamp: 6/16/2008 4:23:51 AM Message: Added |-1| recipients to |domdirect_2722149_20080616042256H| Thread Name: MailerWorker_0001 Extended Properties: ---------------------------------------- ---------------------------------------- Timestamp: 6/16/2008 4:25:31 AM Message: HandlingInstanceID: ec697b94-66ef-4992-9104-5a7b31835083 An exception of type 'System.Net.WebException' occurred and was caught. ----------------------------------------------------------------------- 06/16/2008 04:25:31 Type : System.Net.WebException, System, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Message : The operation has timed-out. Source : System.Web.Services Help link : Status : Timeout Response : ------------------------------------------------------------------------------ SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future of the web can't happen without you. Join us at MIX09 to help pave the way to the Next Web now. Learn more and register at http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/ _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
