[netsa-tools-discuss] Pipeline Does Not Work

[Lutfi Oduncuoglu]

Hello,

I let you know the as soon as possible.

Thank you cvery much,

Regards,

Lutfi

On Thu, Aug 18, 2016 at 6:11 PM, Daniel Ruef <druef at cert.org> wrote:

> Hi Lutfi,
>
>
>
> I’m guessing that you are trying to use “pipeline.conf” as your
> configuration file that is supposed to contain FILTERS and EVALUATIONS.
> This file that is included with the pipeline distribution is supposed to be
> used as the daemon configuration file.
>
>
>
> You can find some example configurations here:
> http://tools.netsa.cert.org/analysis-pipeline5/pipeline-examples.html
>
>
>
> Or you can just try the following as the pipeline configuration file:
>
> FILTER all
>
> END FILTER
>
> EVALUATION test
>
>                 FILTER all
>
>                 ALERT ALWAYS
>
>                 ALERT EVERYTHING
>
>                 CHECK EVERYTHING PASSES
>
>                 END CHECK
>
> END EVALUATION
>
>
>
> Dan
>
>
>
>
>
> *From:* netsa-tools-discuss-bounces+druef=cert.org at cert.org [mailto:
> netsa-tools-discuss-bounces+druef=cert.org at cert.org] *On Behalf Of *Lutfi
> Oduncuoglu
> *Sent:* Thursday, August 18, 2016 10:07 AM
> *To:* netsa-tools-discuss at cert.org
> *Subject:* [netsa-tools-discuss] Pipeline Does Not Work
>
>
>
> Hello,
>
> I am a newbie on netsa tools. I just get up and running yaf and silk. Now
> I  am trying to keep going with analysis pipeline.
>
> I installed the pipeline as told in official document. But I am having too
> much parse error from the  pipeline.conf file.
>
> Even I set the enabled=YES gives the syntax error.
>
> What may be the problem?
>
> Regards,
>
> Lutfi
>
-------------- next part --------------
HTML attachment scrubbed and removed