|
Last change
on this file since 585 was 358, checked in by katerina, 14 years ago |
|
Patch for ticket #264 (Add a deadtime for correlate rules to avoid multiple reports).
|
|
File size:
559 bytes
|
| Rev | Line | |
|---|
| [265] | 1 | #ifndef SH_LOG_CORRELATE_H
|
|---|
| 2 | #define SH_LOG_CORRELATE_H
|
|---|
| 3 |
|
|---|
| 4 | /* Clean up everything.
|
|---|
| 5 | */
|
|---|
| 6 | void sh_keep_destroy();
|
|---|
| 7 |
|
|---|
| 8 | /* Add an event
|
|---|
| 9 | */
|
|---|
| 10 | int sh_keep_add(sh_string * label, unsigned long delay, time_t last);
|
|---|
| 11 |
|
|---|
| 12 | /* Add an event sequence matching rule
|
|---|
| 13 | */
|
|---|
| 14 | int sh_keep_match_add(const char * str, const char * queue, const char * pattern);
|
|---|
| 15 |
|
|---|
| 16 | /* Delete the list of event sequence matching rules
|
|---|
| 17 | */
|
|---|
| 18 | void sh_keep_match_del();
|
|---|
| 19 |
|
|---|
| 20 | /* Try to find correlated events
|
|---|
| 21 | */
|
|---|
| 22 | void sh_keep_match();
|
|---|
| 23 |
|
|---|
| [358] | 24 | /* Deadtime for a correlation rule
|
|---|
| 25 | */
|
|---|
| 26 | int sh_keep_deadtime (const char * str);
|
|---|
| 27 |
|
|---|
| [265] | 28 | #endif
|
|---|
Note:
See
TracBrowser
for help on using the repository browser.