I'm looking to process some data from a specific set of traps upon reception
and wanted the learned opinions of
the list of which method is the least resource intensive.
Method 1: Program in automatic actions directly into the trap definitions
Method 2: Set up a ruleset (ESE.automation) to do the work.
Does either technique have an advantage in resources used, maintainability,
etc....??
I would definitely like to stay away from external trapd.log processing
because it'll involve working around the
automatic log snap features...
Jon C Austin AVP
Enterprise Management
Technology Operations
First USA Bank, NA
(302)282-3498 (phone)
JonAustin@FirstUSA.com
8884631595@skytel.com(pager)
**********************************************************************
This transmission may contain information that is privileged, confidential
and/or exempt from disclosure under applicable law. If you are not the intended
recipient, you are hereby notified that any disclosure, copying, distribution,
or use of the information contained herein (including any reliance thereon) is
STRICTLY PROHIBITED. If you received this transmission in error, please
immediately contact the sender and destroy the material in its entirety,
whether in electronic or hard copy format. Thank you
**********************************************************************
|