...
Code Block | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
s05 = RENAME({type='s05', aliases = ['ts', 'edge']},...) PATTERNDETECTSASE({heartbeatrate=1,query='PATTERN SEQ(s05 s1, s08 s2) where skip_till_any_match(s1,s2){ s1.edge=s2.edge } return s1.ts,s2.ts'}, s05, s08) |
...
Code Block | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
s05 = RENAME({type='s05', aliases = ['ts', 'edge']},...) PATTERNDETECTSASE({heartbeatrate=1,query='PATTERN SEQ(s05 s1, s08 s2) where skip_till_any_match(s1,s2){ s1.edge=s2.edge } return s1.ts,s2.ts'}, s05, s08) |