Hi guys,

I am wondering if SEC pattern can match multilines?

I want it to match something like the following in one rule:

deploymentId => "deployment#srb_1",
deviceId => "0",
observationDateTime => "07-25-2014 13:32:55 UTC"

I am using :
type=Single
ptype=RegExp
pattern=\"deploymentId\"\s+=>\s+(\S+)deployment#(\S+)\",\s*\"deviceId\"\s+=>\s+\"\d+\",\s*\"observationDateTime\"\s+=>\s+\"(.*)\"
desc=Filter for $2
continue=TakeNext
action=create deploymentId_$2;\
assign %deploymentId $2;\
write - time $3;

But it seems to not work, can anyone help?

Thanks.

Yuheng
------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to