Threshold problem
Brought to you by:
toddatkins
Menu
▾
▴
#6 Threshold problem
Hello,
I am having trouble getting threshold to work with
Swatch. I hope some one can shed some light the issue.
Installed swatch 3.1 on Redhat 9.
.swatchrc is
watchfor /snort/
threshold 4:60,repeat=no
command line:
swatch --examine=snort.log --config-file=.swatchrc
The result is:
*** swatch version 3.1 (pid:10436) started at Wed Jun
9 17:46:24 EDT 2004
Undefined subroutine &main::threshold called
at /root/.swatch_script.10436 line 127, <GEN0> line 1.
Not being a Perl programmer, I am not really sure what
the problem is other than to think threshold isn't really
implemented yet.
Thanks ahead of time
Logged In: NO
I have encountered the same problem, an examination of the code shows that the "threshold" functio has not been implemented. Please either implement or remove it from the documentation
Logged In: NO
Using v. 3.1.1. Try the following syntax:
watchfor /snort/
throttle threshold 4:60, repeat=no
Maybe "repeat" option not supported, dont know.
Logged In: NO
i have the same problem