In message <[email protected]>,
"andrewarnier" writes:
>I have set a rule as follow, but I can't get %time1 when write SEC_fifo
You define time1 in "action", but not in action2. Only one of
"action" or action2 will fire in a PairWithWindow rule. If action2
fires, "action" has not fired therefore time1 is never defined.
Please read the manual section PAIRWITHWINDOW RULE.
Stripped rule follows:
>type=PairWithWindow
>
>pattern=(\S+) ONS-15454 Carrier Loss On The LAN in (\S+)
>\(majorServiceAffecting\),ifIndex=(.+)
This is only called if pattern2 IS NOT matched within 10 seconds.
>action=lcall %time1 -> ( sub { my(@time1) = localtime(); \
> my($timestamp) = sprintf( "%04d-%02d-%02d %02d:%02d:%02d", \
> $time1[5]+1900, $time1[4]+1, $time1[3], $time1[2], $time1[1], $time1[0]); \
> return $timestamp; } )
>pattern2=(\S+) NONS-15454 Transport Layer Failure in (\S+)
>\(majorServiceAffecting\),ifIndex=(.+)
Action2 is only called if pattern2 is matched within 10 seconds.
>action2=lcall %time -> ( sub { my(@time) = localtime(); \
> my($timestamp) = sprintf( "%04d-%02d-%02d %02d:%02d:%02d", \
> $time[5]+1900, $time[4]+1, $time[3], $time[2], $time[1], $time[0]); \
> return $timestamp; } );\
> write SEC_fifo %time1,%time,ONS-15454,NONS-15454...; \
> shellcmd /home/andrew/code/sendmail.sh "ONS-15454 ...Carrier Loss On The LAN
> %2 ifIndex=%3" "%s" "%time"
>window=10
I assume %time is printed just fine since it is defined in action2
before it is used.
Do you want a Pair rule where action is executed when pattern matches
and action2 is run only if pattern2 is matched within window (10)
seconds?
--
-- rouilj
John Rouillard
===========================================================================
My employers don't acknowledge my existence much less my opinions.
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
