Nicolas Arias wrote: > From time to time i recieve alerts that in the subject shows a server, > and in the alert body shows another server.
If I understand you correctly. I believe this is due to ossec grouping alerts in 1 email when there are many. Occasionally, I'll get 2, often many more, alerts from various servers in one email. The subject line only lists one, the first?
