Re: [Sguil-users] compressing pcap packet data and/or mysql merge tables
Status: Beta
Brought to you by:
bamm
From: Bamm V. <bam...@gm...> - 2008-08-01 17:21:30
|
Nope, the status column in the event table most definitely gets updated. On Fri, Aug 1, 2008 at 11:19 AM, Barry Gould <mai...@pe...> wrote: > Barry Gould wrote: > OK... I actually compressed the event merge tables too, but I _think_ the > history table is the only one that gets updated when an event is changed. > I'll do some more testing. > -- sguil - The Analyst Console for NSM http://sguil.sf.net |