Hi Nicolas,
It is not really random, since we use the hostname from the highest alert from the e-mail. You can disable grouping in the 1.1 beta, by setting maild.groupping to 0 in the internal_options.conf file. Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On 2/21/07, Nicolas Arias <[EMAIL PROTECTED]> wrote:
Cheers guys, looks that you shoot in the spot. Now, im looking the alerts, and in a mail with 10 alerts, the mail subject is set just for by 1 alert and is random. IS there any way of disabling alerts grouping??? Cheers! Nico. On Tue, 2007-02-20 at 21:53 -0500, Michael Starks wrote: > Nicolas Arias wrote: > > Hello guys! > > > > From time to time i recieve alerts that in the subject shows a server, > > and in the alert body shows another server. > > Hey Nicolas, > > This happens when multiple alerts are sent in the same e-mail. The > subject line will have the hostname of the last alert received. > > -Mike -- Nicolas Arias Security Officer +54 11 4109 1885 +54 9 11 5455 0055 [EMAIL PROTECTED]
