Hi there,
I've been using sec for many users now - very happy with the software.
I've recently been writing more rulesets that are similar, and am wondering
if I can remove the duplication in pattern/descr fields between two related
rules.
e.g. I frequently write rules like this:
type=SingleWithThreshold
continue=takenext
ptype=regexp
pattern=^patternX$
desc=DescrY
context=!mycontext
action=create mycontext 300 (report mycontext_$1_$2 /bin/mail -s "%s" [..])
window=600
thresh=14
type=single
ptype=regexp
pattern=^patternX$
desc=DescrY
context=mycontext
action=add mycontext $0
And have to remember to copy/paste the pattern & desc fields between the
rules. Is there any way to remove this duplication to avoid errors when I
update one value but forget to update the other?
Thanks,
Chris
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users