Hi Derek, Yes, you can have as many entries as you like. Can you show us your configuration after you added the new one? It should be like:
<reports> <category>win_authentication_failed</category> <title>Daily report: Windows Auth Failures</title> <email_to>myemail</email_to> </reports> <reports> <category>syscheck</category> <title>Daily report: Syscheck</title> <email_to>myemail</email_to> </reports> With each entry per report section. thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Mon, Mar 22, 2010 at 1:16 PM, Derek J. Morris <[email protected]> wrote: > I have added this to my ossec.conf > > <reports> > <category>win_authentication_failed</category> > <title>Daily report: Windows Auth Failures</title> > <email_to>myemail</email_to> > </reports> > > > I want to know if i can get emails about other categories. I have added a > second > block of reports to the conf file but does not get processed like the prior > one. > > To unsubscribe from this group, send email to > ossec-list+unsubscribegooglegroups.com or reply to this email with the words > "REMOVE ME" as the subject. > To unsubscribe from this group, send email to ossec-list+unsubscribegooglegroups.com or reply to this email with the words "REMOVE ME" as the subject.
