bowie bailey hehjp_onratpbuccom robert elists wrote would say sacompile preferred method due performance benefits arent many drawbacks using said still get work system everything works fine standard rulesets soon enable compiled rules start getting lots errors logs duplicated rules nobody suggestions posted problem apparently affecting lot people keep eye logs enabling keep mind need add sacompile command update scripts saupdate compile updated rules bowie opsys version using error messages repost tried google name several parameters bring old posts regarding situation yet didnt locate im running centos 46 sa 324 tried get sample errors seems working fine know tried using sacompile fairly recently think 324 still got problem run major update os day two ago maybe fixed something original thread 872007 subject error compiling rules bowie tue 05 aug 2008 234758 0500 sacompile format standard