rasqlinsert record field

Carter Bullard carter at qosient.com
Wed Oct 15 11:39:18 EDT 2014


Hey John,
So, generally, if the first field is ‘-‘ or ‘+’, all the rest
use the same operation.  Understand it first loads all the fields
from your .rarc file, and then does the ‘-‘ or ‘+’.

So the intended way to do this would be:
   -s autoid stime flgs proto saddr sport dir daddr dport pkts bytes state srcid -s -record

So, without a ‘+’ or a ‘-‘, the -s option throws away any initialization
from the .rarc, and replaces with the fields specified.  Because
its rasql*, the ‘record’ field is added after everything is loaded
up from the -s …, so now the second -s takes the record away.

Carter


On Oct 15, 2014, at 11:15 AM, John T. Myers <myersj0 at gmail.com> wrote:

> Ok, so now I’m doing:
> 
> “-s -record autoid stime flgs proto saddr sport dir daddr dport pkts bytes state srcid -d -m none"
> 
> And I get: mysql_real_query error Column ‘state’ specified twice — this is when the table is already created with the old schema.
> 
> If I drop the table and attempt to create a new one with the same command I get a “Duplicate column name ‘stime’ “ error and the table will not create.
> 
> Using just ‘-s -record’ as the only option to -s works fine, but then I can’t specify my schema. So, can I not combine ‘-record’ with other explicit fields I want in my schema using the -s option? 
> 
> john
> On October 14, 2014 at 11:26:10 AM, Terry Burton (tez at terryburton.co.uk) wrote:
> 
>> "-s autoid stime flgs proto saddr sport dir daddr dport pkts bytes state srcid -d -m none"

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20141015/9d519807/attachment.sig>


More information about the argus mailing list