R: How do you chain events within LML

I would like to create a generic filter that can be refined depending on a 
value. Is the following the best way to achieve this or is there another 
way?

Initial message

xxxxxxxx a xxxxxxxx b xxxxxxxx b xxxxxxxx b xxxxxxxx
xxxxxxxx c xxxxxxxx b xxxxxxxx b xxxxxxxx b xxxxxxxx
xxxxxxxx b xxxxxxxx b xxxxxxxx b xxxxxxxx b xxxxxxxx

regex=\w+ b \w+ \w \w+ \w \w+ \w \w+; \
id=2; \
chained; \
silent;

regex=\w+ c \w+ \w \w+ \w \w+ \w \w+; \
id=3; \
chained; \
silent;

regex=\w+ \w \w+ \w \w+ \w \w+ \w \w+; \
optgoto=2; \
optgoto=3; \
id=1; \




-------------------------------------------------------------------
Justin Buhler, CISSP
Information Security Specialist

Zoot Enterprises, Inc    www.zootweb.com
555 Zoot Enterprises Lane
Bozeman, MT  59718
406-586-5050 x7455
direct: 406-556-7455  fax: 406-586-8005
Zoot Technical Support - 406-586-5050 x5 x2
-------------------------------------------------------------------

This email, including any attachments, is confidential and may not be 
redistributed without permission. If you are not an intended recipient, 
you have received this message in error, please notify us immediately by 
replying to this message and deleting it from your computer. Thank you.

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user