[Simple-evcorr-users] Report Context on one line

[Sergio Ruiz]

Title: S21sec

Hi all, I would like to report events added on my context in one single line. For example: ------------------------------- A bit more elegant solution is to reverse the order of rules 2 and 3. And now, no continue=TakeNext is needed: # Example C4.2.02.conf # Rule 1: create context MY_CONTEXT # Rule 2: report context MY_CONTEXT # Rule 3: Add to context MY_CONTEXT # Third rule reports context # # Pattern 'CreateMe' creates the action type=Single ptype=RegExp pattern=CreateMe desc=$0 action="" MY_CONTEXT # Pattern 'ReportMe' executes the report action type=Single ptype=RegExp pattern=ReportMe context=MY_CONTEXT desc=$0 action="" MY_CONTEXT /bin/cat # Anything else gets added to context 'MY_CONTEXT' type=Single ptype=RegExp pattern=(.*) desc=$0 action="" MY_CONTEXT $0 j...@jpb-lt:~/SEC-examples$perl sec.pl -conf=C4.2.02.conf -input=- -debug=4 Simple Event Correlator version 2.1.11 Reading configuration from C4.2.02.conf CreateMe line one line two ReportMe line one line two ------------------------ Is it posible to get this Output? Without the informative debug statements the output is: CreateMe line one line two ReportMe line one line two Thx in advance, -- Sergio Ruiz Mulas Salvo que se indique lo contrario, esta información es CONFIDENCIAL y contiene datos de carácter personal que han de ser tratados conforme a la legislación vigente en materia de protección de datos. Si usted no es destinatario original de este mensaje, le comunicamos que no está autorizado a revisar, reenviar, distribuir, copiar o imprimir la información en él contenida y le rogamos que proceda a borrarlo de sus sistemas. Unless contrary indicated, this information is CONFIDENTIAL and contains personal data that shall be processed according to personal data protection law in force. If you are not the named addressee of this message you are hereby notified that any review, dissemination, distribution, copying or printing of this message is strictly prohibited and we urge you to delete it from your Systems. Antes de imprimir este mensaje valora si verdaderamente es necesario. De esta forma contribuimos a la preservación del Medio Ambiente.

------------------------------------------------------------------------------
This SF.net Dev2Dev email is sponsored by:

Show off your parallel programming skills.
Enter the Intel(R) Threading Challenge 2010.
http://p.sf.net/sfu/intel-thread-sfd
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users