Hi Natalia,
I recently used these two rules to add a new daily input file (e.g.
/myappx/log/appx.log.20140820) by creating a link to the daily created log file:
type=Single
continue=dontcont
ptype=regexp
pattern=SEC_STARTUP
desc=$0
action=eval %logfileprefix (return "/myappx/log/appx.log";); \
shellcmd ln -sf %logfileprefix.`date +"%%Y%%m%%d"` /tmp/mylink-appx.log
type=Calendar
time=0 0 * * *
desc=set up a link for new log file
action=eval %logfileprefix (return "/myappx/log/appx.log";); \
shellcmd ln -sf %logfileprefix.`date +"%%Y%%m%%d"` /tmp/mylink-appx.log
I used the -intevents arg upon SEC startup with -input /tmp/mylink-appx.log.
Regards,
Rock
From: Natalia Iglesias [mailto:[email protected]]
Sent: Wednesday, August 20, 2014 3:24 AM
To: [email protected]; 'Risto Vaarandi'
Subject: [Simple-evcorr-users] Add new input files on the fly
Hello everyone,
We are experiencing the following problem: we start SEC once a day at 00:00
hours, so all new files created at that point will be considered as input files
for SEC rules. However it is possible that new files are created later on
during the day, so how can we let SEC automatically include them for rule
processing without stopping/starting SEC (which would cause as side-effect that
previously processed input files would be processed again).
Thanks in advance!
Best regards,
Natalia Iglesias
------------------------------------------------------------------------------
Slashdot TV.
Video for Nerds. Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
