[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference csc32::consolemanager

Title:POLYCENTER Console Manager
Notice:Kits, Scans, Docs on CSC32:: as PCM$KITS:,PCM$DOCS:, PCM$SCANS:
Moderator:CSC32::BUTTERWORTH
Created:Thu Aug 06 1992
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:1541
Total number of notes:6564

55.0. "one event generates 6 information lines !" by KETJE::SYBERTZ (Marc Sybertz@BRO - 856/7572) Wed Jan 06 1993 09:57

I have something very strange taht happens on my system.

I have defined a '_BRO_Unix' scan subprofile.
I have defined an event 'bro_badsu'.

I have defined the following relationship :

	system brsux0 -> 'Unix System V' scan profile
	Unix System V -> '_BRO_Unix' scan sub_profile
	_BRO_Unix -> 'bro_badsu' event

When I log on system brsux0 and generates a BADSU, it
is trapped by CM but I have 6 times the message displayed
in C3 with same information ...

Any idea of what I did wrong ?

Marc.
T.RTitleUserPersonal
Name
DateLines
55.1Multiple definitions??VINO::DBIGELOWInnovate, Integrate, EvaporateWed Jan 06 1993 22:178
    The only thing I can think of at this point is that you have defined
    the same event in another scan definition. However, although this
    is possible, I would image the the sw should be smart enough to catch
    multiple definitions. I'll have to test it.
    
    Also, are the times of the occurance all the same?
    
    Dave
55.2yupKETJE::SYBERTZMarc Sybertz@BRO - 856/7572Thu Jan 07 1993 09:215
>Also, are the times of the occurance all the same?

Yes.

Marc.   
55.3You may be experiencing a couple of "Features"OPG::PHILIPAnd through the square window...Thu Jan 07 1993 10:2017
Marc,

   Can you check that you are not referencing the same
   event more than once, as Dave says, the software
   should remove duplicates, but we have a slight "bug"
   which stops this happening!

   Also, are you by chance doing a match on beginning
   of line, using the regular expression ^ metacharacter?
   If so, this also has a slight problem, which causes
   the event to be reported multiple times.

   Both of these problems will be fixed in the next kit
   we release.

Cheers,
Phil
55.4^ metacharacter problemKETJE::SYBERTZMarc Sybertz@BRO - 856/7572Fri Jan 08 1993 08:557
>using the regular expression ^ metacharacte

This is what I did ... and indeed without using the ^, it solves the
problem.

Thanks.
Marc.