Hi everybody,

I'm wondering if I could force SEC to avoid waiting 10 seconds after the thresh 
has been matched. Currently I notice SEC matches 20 patterns and then executes 
the action but waits 10 seconds to re-start again the matching, I would like to 
re-start matching right away for other 20 patterns so I don't miss information.

type=SingleWithThreshold
ptype=RegExp
pattern=DENIED_SCANNING_FROM_([\d.]+)
desc=Denied scanning from $1.
action=logonly Repeated denied scan from $1.
window=10
thresh=20

Thanks in advance,
Pedro

------------------------------------------------------------------------------
Got visibility?
Most devs has no idea what their production app looks like.
Find out how fast your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219671;13503038;y?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to