Marty E. Hillman wrote: <snip> > I have been playing with OSSEC quite successfully for the past week in a > demo environment, but it seems to have stopped sending email alerts > sometime last evening.
I've noticed the same thing -- my internet service was out for several hours, during which my logs say an alert happened that would normally have resulted in an email being sent. Obviously, OSSEC was unable to send an alert email due to the outage. Now, OSSEC-HIDS has stopped sending emails altogether. Is there, perhaps, a queue somewhere that needs to be emptied?
