rasqlinsert record field
Carter Bullard
carter at qosient.com
Wed Oct 15 11:39:18 EDT 2014
Hey John,
So, generally, if the first field is ‘-‘ or ‘+’, all the rest
use the same operation. Understand it first loads all the fields
from your .rarc file, and then does the ‘-‘ or ‘+’.
So the intended way to do this would be:
-s autoid stime flgs proto saddr sport dir daddr dport pkts bytes state srcid -s -record
So, without a ‘+’ or a ‘-‘, the -s option throws away any initialization
from the .rarc, and replaces with the fields specified. Because
its rasql*, the ‘record’ field is added after everything is loaded
up from the -s …, so now the second -s takes the record away.
Carter
On Oct 15, 2014, at 11:15 AM, John T. Myers <myersj0 at gmail.com> wrote:
> Ok, so now I’m doing:
>
> “-s -record autoid stime flgs proto saddr sport dir daddr dport pkts bytes state srcid -d -m none"
>
> And I get: mysql_real_query error Column ‘state’ specified twice — this is when the table is already created with the old schema.
>
> If I drop the table and attempt to create a new one with the same command I get a “Duplicate column name ‘stime’ “ error and the table will not create.
>
> Using just ‘-s -record’ as the only option to -s works fine, but then I can’t specify my schema. So, can I not combine ‘-record’ with other explicit fields I want in my schema using the -s option?
>
> john
> On October 14, 2014 at 11:26:10 AM, Terry Burton (tez at terryburton.co.uk) wrote:
>
>> "-s autoid stime flgs proto saddr sport dir daddr dport pkts bytes state srcid -d -m none"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20141015/9d519807/attachment.sig>
More information about the argus
mailing list