I haven't tried this functionality yet but my guess would be in the <global> section in ossec.conf
On 5/18/07, Joshua Fiske <[EMAIL PROTECTED]> wrote: > I just upgraded my server to v1.2, hoping to take advantage of the granular > email alerts. However, I can't seem to find the proper place to insert my > <email_alerts> tags. > > I've tried /var/ossec/etc/ossec.conf (putting the tags in the <alerts> > </alerts> section). I've tried adding them to my local_rules.xml file. Any > pointers or additional tips would be appreciated. > > -- > -- Josh
