Personal tools
You are here: Home User Services Center Projects LoGS Generic Log Analysis Tool/Language LoGS Blog Archive 2007 November 03 mo betta rdl action
Navigation
« November 2009 »
Su Mo Tu We Th Fr Sa
1234567
891011121314
15161718192021
22232425262728
2930
 
Document Actions

mo betta rdl action

Filed Under:
Ok, so I realize my use of the RDL in the last blog entry was /totally pathetic/

Lets try that again...

We could write the rule like this and simplify our lives:

(defvar *ssh-scanner-rule*
      (rule
       matching "Invalid user (.*) from (.*)"
       binding variables (user ip)
       doing
       #'handle-invalid-user-message))

I'm using the RDL to replace the find-invalid-user-message function - that saves me a lot of code!

Powered by Plone CMS, the Open Source Content Management System

This site conforms to the following standards: