I have observed that events are not necessarily processed by zSecure Alert in the order in which they occur.  Is this expected behaviour?

Thanks

Lennie

Hi lennie,

yes that is correct. For each individual alert/destination there is a small CARLa query. These are generated in the order of the alert number into the REPORT member. So at the end of an interval all SMF records/WTO's etc are procesed in that order. So you might get for example a 1102 from a later moment before a 1103 that happened earlier.

hope this helps

cheers

rene

I have observed that events are not necessarily processed by zSecure Alert in the order in which they occur.  Is this expected behaviour?

Thanks

Lennie

Technically speaking, the SMF records are processed in the order they have in the RECENT buffer, WTO records in the order they have in the corresponding buffer. These buffers are desinged to be time-ordered.

Output is generated in the order of the CARLa NEWLIST blocks, with SMF records within each CARLa block hopefully in time order.  Provided, of course, that the SORTLIST command includes the DATETIME value at the beginning of the fields list and not preceded by another field like USERID.

Hi lennie,

yes that is correct. For each individual alert/destination there is a small CARLa query. These are generated in the order of the alert number into the REPORT member. So at the end of an interval all SMF records/WTO's etc are procesed in that order. So you might get for example a 1102 from a later moment before a 1103 that happened earlier.

hope this helps

cheers

rene

I have observed that events are not necessarily processed by zSecure Alert in the order in which they occur.  Is this expected behaviour?

Thanks

Lennie