hi Thomas, this is a late reply, but I hope it is still helpful (somehow I failed to notice your mail in my mailbox :(
When having a look at the problem, I realized that this issue has been discussed in the mailing list before: http://sourceforge.net/mailarchive/message.php?msg_id=430F339A.6010508%40seb.ee As a side note, SF now offers a search engine for the mailing lists of all hosted projects, and SEC mailing list can now be searched at: http://sourceforge.net/search/?group_id=42089&type_of_search=mlists You can also navigate to this page when going to the SEC project page at http://sourceforge.net/projects/simple-evcorr/develop, then opening the "Mailing Lists" menu and clicking on "Search". hth, risto --- On Wed, 7/29/09, Thomas Wollner <[email protected]> wrote: > From: Thomas Wollner <[email protected]> > Subject: [Simple-evcorr-users] Count and report suppressed events > To: [email protected] > Date: Wednesday, July 29, 2009, 6:09 PM > Hello List, > > I need some input on howto solve the following > requirement: > > I have an event from windows eventlog with ID 4099. this > event happens > very often so I want to fire an action immediatly after > receiving the > first and suppress the the rest for a given timewindow. so > far no > problem. > But how I can count the suppressed events and report them > via action? > > currently I have the following rule: > > type=SingleWithSupress > continue=DontCont > pattern=.*?|(4099)| > action=shellcmd ./myscript.sh $1 > window=3600 > > Any Ideas? any help is highly welcome. > > thanks in advance, > > Tom > > > > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging > Program. > > > > ------------------------------------------------------------------------------ > Let Crystal Reports handle the reporting - Free Crystal > Reports 2008 30-Day > trial. Simplify your report design, integration and > deployment - and focus on > what you do best, core application coding. Discover what's > new with > Crystal Reports now. http://p.sf.net/sfu/bobj-july > _______________________________________________ > Simple-evcorr-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users > ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Simple-evcorr-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
