I just upgraded my server to v1.2, hoping to take advantage of the granular email alerts. However, I can't seem to find the proper place to insert my <email_alerts> tags.
I've tried /var/ossec/etc/ossec.conf (putting the tags in the <alerts> </alerts> section). I've tried adding them to my local_rules.xml file. Any pointers or additional tips would be appreciated. -- -- Josh
