Inline action fails in ruleset
have an inline action which is filtering out Cisco messages containing BRIO ,
FMT and TX strings on Interface Down / Interface Up .
The problem is that sometimes that those messages get passed by the inline
action anyway. The inline action takes about 0.6 seconds to execute.
We have a wait interval of 3 seconds in the inline action.We get the following
error entries in nvcorrd.blog :
2000/11/16 12:01:06 UserExitDnode.C : Inline command
'/usr/OV/RFV/scripts/stop_bri.sh' failed. error data:
/usr/OV/tmp/@@uactions: 0403-057 Syntax error at line 26 : `'' is not
Now some questions :
Is the entry in the nvcorrd.blog related to the fact that some messages are
the inline action when they shouldn't ?
Should we increase the wait interval from 3 seconds to 3 + ?
Can this filtering be done some other way ? We tried the Event Attribute
decision Node but since our argument strings vary
e g BRIO/1 or BRIO/4 and so on we can't have EXACT match.
Awaiting eagerly suggestions