[Simple-evcorr-users] Use global variables
Brought to you by:
ristov
From: Agustín L. R. <ag...@ho...> - 2020-12-16 10:19:07
|
Hi Risto, Is it possible to use global variables? For example: VARIABLE1 = msg 1 VARIABLE2 = msg 2 and after use these variables in a different rules: type=Single ptype=RegExp pattern=sshd\[\d+\]: Failed .+ for (\S+) from ([\d.]+) port \d+ ssh2 desc=use of VARIABLE1 action=logonly $1 $VARIABLE1 type=Single ptype=RegExp pattern=sshd\[\d+\]: Failed .+ for (\S+) from ([\d.]+) port \d+ ssh2 desc=use of VARIABLE2 action=logonly $1 $VARIABLE2 Thanks you! |