# Loop thru the RTEVENTS for a match on srcip msg if {$SENSOR_AGGREGATION_ON} { # Match alerts from just this sensor (sid) set tmpList [array names eventIDArray ${sid}.*] } else { # Match alerts from any sensor set tmpList $eventIDList }