Neither ruleset-editor nor filter control are what i'd consider the REAL
thing.
I prefer a good old event-driven shell-script all the time...
On my installation actually about 99% of incoming events are treated this
way.
And both my users and i just love it...
Ralph.
-----Ursprüngliche Nachricht-----
Von: Mark van Kerkwyk [SMTP:kerkwyk@COMTECH.COM.AU]
Gesendet am: Dienstag, 15. Dezember 1998 08:39
An: NV-L@UCSBVM.ucsb.edu; Schiffinger Ralph 0714
Betreff: How many of you use the RuleSet editor , or do you write your
own
perl/shell/C rules handler ??
I am wondering how many of you use the RuleSet editor much or whether you
just create an inline action which calls a perl/shell/C script to handle
the incoming events.
I am finding it hard to get what I need done, just simple things like ( if
Enterprise OID =Lotus or Cisco or Netfinity and Severity is > 2 then page
this group of people, if Enterprise OID = ArcServe then page this person)
become quite cumbersome and the rule set edit fills up very quickly with
the very large icons, they are also not labelled with anything too
meaningful and my customer doesn't like it too much.
I can't seem to page a group of people anyway and the nvsec_admin on
Solaris can't be used to administrer user/group names much.
Any comments ?
Mark
|