Changeset 265 for trunk/include/sh_log_evalrule.h

Timestamp:

Dec 21, 2009, 8:54:07 PM (15 years ago)

Author:

katerina

Message:

Enhance logfile monitoring (tickets #183, #184, #185).

File:

• trunk/include/sh_log_evalrule.h (modified) (1 diff)

trunk/include/sh_log_evalrule.h

@@ -39 +39 @@
 int sh_eval_process_msg(struct sh_logrecord * record);
 
-/* Match correlated rules
- */
-void sh_keep_match();
+enum policies {
+  EVAL_REPORT,
+  EVAL_SUM
+};
+
+struct sh_qeval  /* Queue with definitions */
+{
+  sh_string       * label;
+  enum policies     policy;
+  int               severity;
+  time_t            interval;        /* if EVAL_SUM, interval   */ 
+  struct sh_qeval * next;
+};
+
+struct sh_qeval * sh_log_find_queue(const char * str);
+
+int sh_log_lookup_severity(const char * str);
 
 #endif