In message
<cab3_bpoyf-ppbhwvfulf2g88crcfma4q2e1fdkxxsu7moz2...@mail.gmail.com> ,
"Justin J. Novack" writes:
>Excellent points, all. I've decided to combine the two approaches.
>However, I'm stuck.
>
>As you can see below, I'm loading the hashes on startup, and the second rule
>doesn't run. :( If I remove the context from the second rule, it runs fine.
>I don't think context =($perl_hash{$2})
But that's not what you have, although it is what I typoed 8-(.
>is a valid context or check. If that is the case, how do I dump
>the hash to create contexts?
>
>On Tue, Oct 18, 2011 at 3:48 PM, John P. Rouillard <[email protected]>
> wrote:
>
>
>> I think adding a
>>
>> context = system_name_$2
>>
>> or
>>
>> context =($perl_hash{$2})
My bad. Forgot an extra = sign. Should have been
context = =($perl_hash{$2})
>> to your rules will fix that nicely. If the contexts/hash entry aren't
>> defined the rules don't fire.
>
>testing.sec
>=========
>type=Single
>desc=Load hashes at startup
>ptype=SubStr
>continue=TakeNext
>pattern=SEC_RESTART
>context=SEC_INTERNAL_EVENT
>action=eval %a ( undef %hash; \
> open(FILE, "</etc/sec/friendlynames.txt"); \
> while (<FILE>) { chomp; my ($key, $val) = split /=/; $hash{"$key"} =
>$val; }); \
> eval %a (my $line; foreach (keys %hash) { $line .= "$_ = $hash{$_}\n";
>}; chomp($line); return $line);
>
>type=Single
>desc=WTF doesn't this work?!
>ptype=SubStr
>pattern=SEC_RESTART
>context=($hash{"GigabitEthernet1/37"})
context= =($hash{"GigabitEthernet1/37"})
Note the expression starting with the = sign.
See the manpage section CONTEXT EXPRESSIONS para 4 or so
starting with 'If the operand begins with the equal sign (=)'
--
-- rouilj
John Rouillard
===========================================================================
My employers don't acknowledge my existence much less my opinions.
------------------------------------------------------------------------------
The demand for IT networking professionals continues to grow, and the
demand for specialized networking skills is growing even more rapidly.
Take a complimentary Learning@Ciosco Self-Assessment and learn
about Cisco certifications, training, and career opportunities.
http://p.sf.net/sfu/cisco-dev2dev
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users