Hi All,
I have a question. From the man page:
The SingleWithThreshold rule runs event correlation operations for
counting repeated instances of the same event during T seconds, and
taking an action if N events are observed.
Is there any way to get hold of the value of N?
I would like the sliding window value, not the absolute value.
Thanks,
Richard
--
Richard Jones +44 7843 588 599
"Quod gratis asseritur, gratis negatur"
Privacy notice: http://www.jonze.com/privacy.html
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
