| >My customer wants to be able to receive an event in the eventlist if there is
>a unknow message that is not already defined in any events definition of
>filters. The customer told me that they know about 90% of theirs messages but
>they don't want to go into theirs log every night to see if they have new
>message that they don't filtered already.
PCM doesn't do "inverse scanning". In other words, it can only search
for things it knows about. It can't search for things that it doesn't
know about unless you match on everything. As Shaun Eliss pointed out
it keeps the list of events in alpha order so you could define an
event called ZZZZZZZZZ(or some such) whose type is a regular expression
with a match string of *^. This would match on any string followed by
EOL but it is recommended not to do this.
I know that I can check for every line but the machine will die and this will
not fix the problem of receiving unknow messages. I can understand why the
customer wants to do it this way but I'm not sure if the product can do it.
>I have another question. If PCM match an event, is it going to exit right away
>or will pass over the rest of events defined.
I'm not sure I understand your question but I think your asking if it's
possible for a single line of text to match more than one event. It is
possible to have a line of text match multiple events. It depends on how
the event(s) are defined.
Regs,
Dan
|