[ossec-list] Re: Question about monitoring specific directories and emailing admins

[Peter M. Abraham]

Greetings:

This is what we use:

   <email_alerts>
    <email_to>[separate admin email without brackets]</email_to>
    <event_location>[agent name]|[next agent for the admin name]</
event_location>
    <do_not_group />
    <do_not_delay />
   </email_alerts>

Thank you.