Forum Discussion
hooleylist
Dec 08, 2008Cirrostratus
Hi Jai,
I'm pretty sure you can enable timing per rule or per event, but not more granular than the event. You get a syntax error when trying to enable/disable timing within a rule event:
when HTTP_REQUEST {
timing on
log local0. "test"
timing off
}
line 2: [command is not valid in the current scope] [timing on]
line 4: [command is not valid in the current scope] [timing off]
Aaron