Can "Stop Processing Action" be called from a script?

Is there a way to stop the processing of an event from within a called script, such as triggering the "Stop Processing Action" action?

I'm parsing events passed from SNARE and want to be able to drop an event for any additional processing if it meets certain criteria.

Thanx,

Bill_syslog

Find more posts tagged with

scripted_actions

kiwi_syslog

Accepted answers

Aforsythe

Yes you can. Strangely enough, this is listed in the help under "Script Variables" and technically it IS a script variable, but I feel it needs to be documented somewhere more intuitively.

What you want to do is set Fields.ActionQuit = 1000 and that will stop processing the message.

0 clears it.

1-99 sets it to skip the next n actions in the same rule

100 skips to the next rule

1000 stops processing.

All comments

Aforsythe

Yes you can. Strangely enough, this is listed in the help under "Script Variables" and technically it IS a script variable, but I feel it needs to be documented somewhere more intuitively.

What you want to do is set Fields.ActionQuit = 1000 and that will stop processing the message.

0 clears it.

1-99 sets it to skip the next n actions in the same rule

100 skips to the next rule

1000 stops processing.

wleddy

I'm still pretty new to this and hadn't caught that from help docs, thanx for pointing it out!

Bill

Aforsythe

Glad I could help Bill.If you have any other questions feel free to post them.