Hi Thanks to Risto for SEC. It has been a great success in one of the banks here.
An app developer recently approached me to ask if it is possible for SEC to monitor multiple occurrences of an event, but if one is different, then reset the count. For example: 10 occurrences of "KP TechFault" within 60secs triggers an alert. But if just "KP" arrives within that time frame, then the count and window are reset. Any pointers in the right direction are greatly appreciated. - Alan ------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-novd2d _______________________________________________ Simple-evcorr-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
