Changeset 260 for trunk/src/sh_log_check.c

Timestamp:

Dec 7, 2009, 10:00:29 PM (15 years ago)

Author:

katerina

Message:

Support event correlation (ticket #178).

File:

• trunk/src/sh_log_check.c (modified) (4 diffs)

trunk/src/sh_log_check.c

@@ -28 +28 @@
 
 /* List of supported logfile types, format is
- * { "TYPE_CODE", Reader_Callback_Function, Parser_Callback_function }
+ * { 
+ *   "TYPE_CODE", 
+ *   Reader_Callback_Function, 
+ *   Parser_Callback_function,
+ *   Evaluate_Callback_Function 
+ * }
  * If Reader_Callback_Function is NULL, the default (line-oriented
  * text file) reader is used.
@@ -78 +83 @@
   plen = strlen(save_dir);
 
-  if (SL_TRUE == sl_ok_adds(plen, 129))
-    {
-      plen += 129; /* 64 + 64 + 1 */
+  if (SL_TRUE == sl_ok_adds(plen, 130))
+    {
+      plen += 130; /* 64 + 64 + 2 */
       path = SH_ALLOC(plen);
       (void) sl_snprintf(path, plen, "%s/%lu_%lu", save_dir,
@@ -860 +865 @@
     {
       sh_check_watches();
+      sh_keep_match();
     }
   SH_MUTEX_UNLOCK(mutex_logmon_check);
@@ -1036 +1042 @@
 
 /* Define a check rule.
- * Format: Queue_Label : Regex
- * TYPE must be 'report' or 'sum'
+ * Format: [KEEP(seconds,label):]Queue_Label : Regex
+ * KEEP indicates that we keep the label, to perform
+ *      correlation matching
  */
 static int sh_logmon_add_rule (const char * str)