Negative thresholds?

Yes, it can be done.

The server code shouldn't be a problem for this. You just
need to
create a new plugin wich sends to the ossim server the data
normalized
without the minus sign. Then, in the server a new directive
can be
created to raise alarms if the temp is greater than 70. So
you can get
an alarm that tells, for example:

Risk: 3: "Warning, temperature is growing: -70
degrees".

And if the temperature continues growing, the risk of the
alarm could increase:

Risk: 7: "Warning, temperature is growing: -65
degrees".

At this time there are not so much documentation about how
to make a
new plugin, but you can take a look at
/etc/ossim/agent/plugins/ to
see some examples

BR,
Alberto.

2007/8/18, Dominique Karg <dkossim.net>:
> Hi Tonni,
>
> not 100% sure about this one since it's been some time
since I checked the
> server code personally but I don't see any problem
here. I've never tried
> negative thresholds but in the worst case you could
just add a fixed number
> to all the recolected values and match against a
positive one.
>
> Anyway, once Alberto gets back from holidays he should
have a better answer.
>
> Greetings,
>
> Dominique
>
>
> Am 17.08.2007 um 14:30 schrieb Tonni Langelund:
>
>
>
> I am looking at your OSSIM (Open Source Security
Information Management) and
> before digging in to deep, I have just one question.
>
>
>
> Is the system able to give alarm based on negative
thresholds? I have a
> Sensatronics Temperature Monitor, and have probes
installed in our -80
> Degrees Celsius freezer. I want to get an alarm when
the temp. gets above
> -70 degrees. Is that possible?
>
>
>
>
>
> <image002.jpg>
>
> Tonni Langelund
>
> IT Consultant
>
>
>
> RHEOSCIENCE A/S
>
> Glerupvej 2
>
> DK–2610 Roedovre
>
> Denmark
>
> Direct + 45 44 50 19 60
>
> Fax + 45 44 50 19 62
>
> Mobile + 45 30 70 48 40
>
>
> <image002.jpg>
>
------------------------------------------------------------
-------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? 
Stop.
> Now Search log events and configuration files using
AJAX and a browser.
> Download your FREE copy of Splunk now >>
> http://get.splunk.com/_____________________
__________________________
> Os-sim-support mailing list
> Os-sim-supportlists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/os-sim-s
upport
>
>
------------------------------------------------------------
-------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? 
Stop.
> Now Search log events and configuration files using
AJAX and a browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> _______________________________________________
> Os-sim-support mailing list
> Os-sim-supportlists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/os-sim-s
upport
>
>

------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Os-sim-support mailing list
Os-sim-supportlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/os-sim-s
upport