This is something I run into all the time.  I have incoming event  (example #1 
below) where I want to change the
message (or other variable) depending on how a rule executes.

The only method I'm familiar with in SEC, is to halt the current event 
(continue=DontCont), and send out a new
event with the message altered in the action.

My question - is there a way to change a variable in one rule, and have all 
subsequent rules use the modified variable.

     $1           $2          $3         $4              $5
1372432672 :: gpbux0001 :: mon_sql :: CRITICAL :: I have a problem here !!!

I'd like to keep everything but the message ($5), but not have to send in 
another event.  Is this possible?
1372432672 :: gpbux0001 :: mon_sql :: CRITICAL :: I have had this problem 10 
times today !!!

Thanks.

Gary Boyles
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to