hi Gonzalo, from the crontab line you have given, I can conclude that the file is not overwritten, but new data are simply appended to it (the >> operator means append, while > truncates the file before writing). In the case of >> SEC has no issues with monitoring the file, since new events are normally added to log files by appending. BR, risto
> Hi all, > > I have a file that is going to be monitorized with sec, but > this file is > rewriten every 4 minutes, on this simplified way via > crontab > > */4 * * * * cat /log/original_file.log | sort -n >> > /log/sortened_file.log > > And now i need to setup some alerts using that sortened > file, this alerts > will use contexts, singlewith thresholds and so, and i'm > not sure about > how sec will handle this alerts if the file is rewriten > every 4 minutes. > > anyone here have been on a similar situation? > > Thanks and regards form Zaragoza > > > ------------------------------------------------------------------------------ > ThinkGeek and WIRED's GeekDad team up for the Ultimate > GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the > lucky parental unit. See the prize list and enter to > win: > http://p.sf.net/sfu/thinkgeek-promo > _______________________________________________ > Simple-evcorr-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users > ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Simple-evcorr-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
