03-29-2020 10:43 PM
i am trying to write a event manger applet :
action 0010 regexp "^.([0-9][0-9][0-9]):.:.DROP. ([0-9.]+).* -> .*" "$_syslog_msg" _knock_RegEx_Match _knock_Sequence_E1 _knock_Source_E1
action 0020 info type event reqinfo tag _knock_Tag_E2
action 0030 regexp "^.([0-9][0-9][0-9]):.:.DROP. ([0-9.]+).* -> .*" "$_syslog_msg" _knock_RegEx_Match _knock_Sequence_E2 _knock_Source_E2
action 0100 if $_knock_Sequence_E1 lt $_knock_Sequence_E2
my router does not recognize the '$' of the variable , why ?
03-30-2020 03:13 AM
Hi,
You mean the parser gives an error message when you put the command in? Can you post the exact error you get?
Regards,
Cristian Matei.
03-31-2020 01:58 AM
when i configured : action 0010 regexp "^.([0-9][0-9][0-9]):.:.DROP. ([0-9.]+).* -> .*" "$_syslog_msg" _knock_RegEx_Match _knock_Sequence_E1 _knock_Source_E1
the show run command gives me the output:
action 0010 regexp "^.*([0-9][0-9][0-9]):.*:.*DROP.* ([0-9.]+).* -> .*" "_knock_RegEx_Match" _knock_Sequence_E1 _knock_Source_E1
with missing "$_syslog_msg" as i configured in the command line
and when i configured : action 0100 if $_knock_Sequence_E1 lt $_knock_Sequence_E2 , i got an error :
see the attached file
03-31-2020 03:04 AM
Hi,
I’m far from being good with TCL, so either the syntax is wrong, either you hit a bug and should upgrade.
Regards,
Cristian Matei.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide