hi, in fact, SEC official documentation (http://simple-evcorr.github.io/man.html) has a relevant example in the introductory section together with an in-depth discussion. This example concerns SSH login failures and you probably need to adjust it to cover your scenario. kind regards, risto
2016-12-12 13:45 GMT+02:00 Varun <ez2...@gmail.com>: > Hello All, > > Are there any rule examples to take an action if there are 5 unique login > failures on a server in 30 mins ? > > thanks in advance. > > -- > Varun > > ------------------------------------------------------------------------------ > Developer Access Program for Intel Xeon Phi Processors > Access to Intel Xeon Phi processor-based developer platforms. > With one year of Intel Parallel Studio XE. > Training and support from Colfax. > Order your platform today.http://sdm.link/xeonphi > _______________________________________________ > Simple-evcorr-users mailing list > Simple-evcorr-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users > ------------------------------------------------------------------------------ Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel Parallel Studio XE. Training and support from Colfax. Order your platform today.http://sdm.link/xeonphi _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users