On Thu, 28 Apr 2011, Gleeck, Edward Joseph. (GSFC-444.0)[CAELUM RESEARCH CORP] wrote:
First off, SEC rocks! We've been using it for quite some time. I was hoping to get some help in regards to creating a specific set of rules. Here's what I have. I would like to know when an event changes. Consider the following events: Apr 22 2004 127.0.0.0 0 latest frq 0 Apr 22 2004 127.0.0.0 0 latest frq 0 Apr 22 2004 127.0.0.0 0 latest frq 0 Apr 22 2004 127.0.0.0 0 latest frq 2 Apr 22 2004 127.0.0.0 0 latest frq 3 Apr 22 2004 127.0.0.0 0 latest frq 3 Apr 22 2004 127.0.0.0 0 latest frq 4 I would like to take action when frq changes from 0 to 2 or from 3 to 4. I'm not interested in the same values. NOW, to complicate matters these types of events aren't the only ones we are receiving, so, our events now look like: Apr 22 2004 127.0.0.0 0 latest frq 0 Other events Apr 22 2004 127.0.0.0 0 latest frq 0 Other events Other events Apr 22 2004 127.0.0.0 0 latest frq 0 Apr 22 2004 127.0.0.0 0 latest frq 2 Apr 22 2004 127.0.0.0 0 latest frq 3 Apr 22 2004 127.0.0.0 0 latest frq 3 Other events Apr 22 2004 127.0.0.0 0 latest frq 4If the events we're receiving only contains the latest frq events, then I could easily compare that using sub {$_[0] ne $_[1]}, but it's not.Any help would be much appreciated.
I would probably do a perl subroutine for this.the perl subroutine can look for 'latest frq ' and then compare the value with a value stored in a variable. If they differ, save the new value in the variable and return the appropriate information for the alert. if they don't differ, don't return anything.
David Lang
------------------------------------------------------------------------------ WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________ Simple-evcorr-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
------------------------------------------------------------------------------ WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________ Simple-evcorr-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
