Hi all,
Because of the file permission problem,I have solved the problem .
But now I have another question about how to writing event database
For example:
my log :
Tue Feb 11 09:04:10 2014 .1.3.6.1.6.3.1.1.5.4 Normal "linkUp/Down"
CISCO-7453P - Link Up on Interface GigabitEthernet1/20
(up),ifIndex=20,PortType=ethernetCsmacd
Tue Feb 11 09:04:10 2014 .1.3.6.1.6.3.1.1.5.4 Normal "Status Events"
CISCO-7453P - Link up on interface 20. Admin state: GigabitEthernet1/20.
Operational state: ethernetCsmacd
Tue Feb 11 09:04:34 2014 .1.3.6.1.2.1.17.0.2 Critical "VLAN" CISCO-7453V - A
Spanning Tree Topology Change at Te1/0/1 on VLAN 564
Tue Feb 11 09:04:39 2014 .1.3.6.1.2.1.17.0.2 Critical "VLAN" CISCO-7453V - A
Spanning Tree Topology Change at Te1/0/1 on VLAN 564
Tue Feb 11 09:04:41 2014 .1.3.6.1.2.1.17.0.2 Critical "VLAN" CISCO-7453V - A
Spanning Tree Topology Change at Te1/0/1 on VLAN 564
Tue Feb 11 09:13:07 2014 .1.3.6.1.4.1.9.9.41.2.0.1 Critical "linkUp/Down"
CISCO-7453P - Interface GigabitEthernet1/20, changed state to down
And I have setting a sec rule for Spanning Tree Topology Change flapping
Connecting SEC to MySQL .
It's should have four record in my database as follow
Tue Feb 11 09:04:34 2014 .1.3.6.1.2.1.17.0.2 Critical "VLAN" CISCO-7453V - A
Spanning Tree Topology Change at Te1/0/1 on VLAN 564
Tue Feb 11 09:04:10 2014 .1.3.6.1.6.3.1.1.5.4 Normal "linkUp/Down"
CISCO-7453P - Link Up on Interface GigabitEthernet1/20
(up),ifIndex=20,PortType=ethernetCsmacd
Tue Feb 11 09:04:10 2014 .1.3.6.1.6.3.1.1.5.4 Normal "Status Events"
CISCO-7453P - Link up on interface 20. Admin state: GigabitEthernet1/20.
Operational state: ethernetCsmacd
Tue Feb 11 09:13:07 2014 .1.3.6.1.4.1.9.9.41.2.0.1 Critical "linkUp/Down"
CISCO-7453P - Interface GigabitEthernet1/20, changed state to down
Can I do it?
Can anyone give me some advice on what to do please?
andrew
From: andrewarnier [mailto:[email protected]]
Sent: Tuesday, February 11, 2014 11:10 AM
To: '[email protected]'
Subject: Can't open SEC_fifo for writing event 'database
Hi all,
I want to using SEC integrated with a mysql database.
And find the URL of a page
http://simple-evcorr.sourceforge.net/SEC-tutorial/article-part2.html#DATABAS
EINTEGRATION
C3.4.01.conf :
# Example C3.4.01.conf
# Recognize any pattern and write to a FIFO.
#
type=Single
ptype=RegExp
pattern=(.*)
desc=$0
action=write SEC_fifo %s
but when I start up SEC with the same configuration file used in the FIFO
example and enter some test data as follows:
$ perl ./sec-2.7.5/sec -conf=C3.4.01.conf -input=-
SEC (Simple Event Correlator) 2.7.5
Reading configuration from C3.4.01.conf
1 rules loaded from C3.4.01.conf
Opening input file -
Interactive process, SIGINT can't be used for changing the logging level
database insert test line B
Writing event 'database insert test line B' to file SEC_fifo
Can't open SEC_fifo for writing event 'database insert test line B' (No such
device or address)
I got the error msg and failed
Can't open SEC_fifo for writing event 'database insert test line B' (No such
device or address)
Can anyone give me some advice on what to do please?
andrew
------------------------------------------------------------------------------
Android apps run on BlackBerry 10
Introducing the new BlackBerry 10.2.1 Runtime for Android apps.
Now with support for Jelly Bean, Bluetooth, Mapview and more.
Get your Android app in front of a whole new audience. Start now.
http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
