On Fri, 9 Oct 2009, Marc Perkel wrote:

Starting to write some SA rules again. What is the syntax for a rule where it's true if two other rules are both true? Need a small example.

meta  NAME  (rule1 && rule2)

It's essentially Perl logical expression syntax, and basic math expression syntax if you want to count:

meta  NAME  rule1 && (rule2a + rule2b + rule2c + rule2d > 2)


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  No representation without taxation!
-----------------------------------------------------------------------
 8 days since a sunspot last seen - EPA blames CO2 emissions

Reply via email to