Hi Folks,
I'm new to SEC and am trying a single simple rule which will just add each
event containing the text 'AAA' to a context store and then print out the
size of the context store each time.

(contents of file *test-sec.rules*)
type=Single
ptype=SubStr
pattern=AAA
desc=Three A characters
action=add C1 AAA ; getsize %size C1; write - context store size = %size

When I run SEC, I get '*invalid action* *getsize*' error:
$ sec  --input=- --conf=./test-sec.rules
SEC (Simple Event Correlator) *2.5.3*
Reading configuration from ./test-sec.rules
Rule in ./test-sec.rules at line 1: *Invalid action 'getsize %size C1'*
Rule in ./test-sec.rules at line 1: Invalid action list ' add C1 AAA ;
getsize %size C1; write - context store size = %size '
No valid rules found in configuration file ./test-sec.rules
Stdin connected to terminal, SIGINT can't be used for changing the logging
level


It's probably something obvious, but I can't seem to figure out what is
causing the error. I searched the mailing lists, but only found old version
of SEC as a possible cause. I am using the latest version here.

Pl. help. Thanks,
Noel.
------------------------------------------------------------------------------
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to