Denis Shaposhnikov wrote: > Hello, > > I have next configuration: > > <alerts> > <log_alert_level>1</log_alert_level> > <email_alert_level>7</email_alert_level> > </alerts> > > Is it possible to configure ossec don't send email alerts of some > level 10 rules?
Hello Denis, For the particular rules you don't want an e-mail, you can use this: <options>no_email_alert</options> within the alert, itself. HTH, Mike
