Here is the scenario: I have the "email_to" option set in the global config. The email address set with this option receives *all* ossec notifications that are emailed. I also use the email_alerts configuration to send specific alerts to different admins.
There are some alerts that I don't necessarily want sent to the address set in the global config -- they are sent to the appropriate admins via the email_alerts settings. Is there any way to *not* alert the address in the global config while still sending alerts? Thanks --Matt
