Let's say I have messages like: msg=A msg=B ...
and my rule is: type=Single ptype=regexp pattern=^msg=(.*)$ action= assign %msg $1; \ create EVENT_%msg 30 ( logonly %msg expired ) Does the action list for when the context EVENT_%msg expires, get saved somewhere when the create action happens? Or, does that get evaluated when the context expires? e.g., if msg=A and msg=B are less than 30 seconds apart, when EVENT_A expires, will I get "A expired" or "B expired" in my log message? Is the scope of action variables like %msg in the above example global? If one rule sets %msg, can another rule then access that value in %msg? Or are they all locally scoped and disappear once the rule is done processing? Thank you, Bond ------------------------------------------------------------------------------ _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users