A few unrelated questions...

[Dave Edelman]

You can control the precision of numeric fields with -p the man pages
describe this as controlling the prevision of the Unix time display but it
also works for the other numeric fields most notably those associated with
-H (express values scaled to  K, M, G, T ).

 

The full set of field specifiers is in the argus-clients distribution in
support/Config/rarc.print.all.conf look for the line that starts with
RA_FIELD_SPECIFIER=

 

--Dave 

 

From: argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu
[mailto:argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu] On
Behalf Of Craig Merchant
Sent: Thursday, January 17, 2013 9:41 PM
To: Argus (argus-info at lists.andrew.cmu.edu)
Subject: [ARGUS] A few unrelated questions...

 

Carter,

 

Is there a master list of all of the field options for -s?  You mentioned
the snstroke and dnstroke in the post about SSH keystrokes, but I don't see
them in the documentation for ra online.  I found this thru google which
seems to list all of the field options, though some of them are still kind
of cryptic:

 

http://fossies.org/unix/misc/argus-clients-3.0.7.4.tar.gz:a/argus-clients-3.
0.7.4/support/Config/rarc.print.all.conf

 

Is there any way to control the decimal precision of numeric fields?  It
would be particularly nice if I could choose to use "0" instead of
"0.000000".

 

What do the values for snstroke and dnstroke represent?   I've turned it on
with the defaults and if I type away at a moderate pace (like 30-50 wpm), it
might give a value of 9-15.  If I type quickly (80+ wpm), it seems to
intermittently give me very high or very low values.  Are there any best
practices for tuning the keystroke recognition settings?

 

This might be more of a feature request.  It would be great if the sql
commands used for creating time indexes for files could be written to a text
file instead of a database.  That way I could index it in Splunk rather than
have to deal with the complexity of managing (yet another) database.

 

Thanks for all your help!

 

Craig

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130117/b0088341/attachment.html>