[ossec-list] Granular Mail Options

[Steve McMaster]

>From reading the wiki, I see that I can do the following:

 <email_alerts>
   <email_to>[EMAIL PROTECTED]</email_to>
   <level>12</level>
   <event_location>qwerty|agt1</event_location>
   <do_not_delay />
 </email_alerts>

Can I use wildcards in the <event_location> definition? For example:

 <email_alerts>
   <email_to>[EMAIL PROTECTED]</email_to>
   <level>12</level>
   <event_location>*.y.z</event_location>
   <do_not_delay />
 </email_alerts>

And have that mail for agents with names such as a.y.z, b.y.z, etc?

Thanks.