Index: trunk/include/sh_cat.h
===================================================================
--- trunk/include/sh_cat.h	(revision 259)
+++ trunk/include/sh_cat.h	(revision 260)
@@ -167,4 +167,5 @@
  MSG_LOGMON_REP,
  MSG_LOGMON_SUM,
+ MSG_LOGMON_COR,
 #endif
 
Index: trunk/include/sh_log_evalrule.h
===================================================================
--- trunk/include/sh_log_evalrule.h	(revision 259)
+++ trunk/include/sh_log_evalrule.h	(revision 260)
@@ -35,4 +35,11 @@
 int sh_eval_gend (const char * str);
 
+/* Process a single log record
+ */
 int sh_eval_process_msg(struct sh_logrecord * record);
+
+/* Match correlated rules
+ */
+void sh_keep_match();
+
 #endif
Index: trunk/include/sh_string.h
===================================================================
--- trunk/include/sh_string.h	(revision 259)
+++ trunk/include/sh_string.h	(revision 260)
@@ -84,4 +84,9 @@
 char ** split_array_list(char *line, unsigned int * nfields, size_t * lengths);
 
+/* Return a split_array_list() of a list contained in 'PREFIX\s*( list ).*'
+ */
+char ** split_array_braced (char *line, const char * prefix,
+			    unsigned int * nfields, size_t * lengths);
+
 /* Replaces fields in s with 'replacement'. Fields are given
  * in the ordered array ovector, comprising ovecnum pairs