I already changed it
# Maild grouping (0=disabled, 1=enabled)
# Groups alerts within the same e-mail.
maild.groupping=0

And now i am getting log mails with about 20 - 30 alerts in them with only 1 in the error level indicated.

how can i make it that i do not get those long report emails ?

Assaf


dan (ddp) wrote:
I'm seeing the same problem. Level 5 and 7 alerts in an email with the
subject claiming level 10.
To change the aggregation setting, edit /var/ossec/etc/internal_options.conf

# Maild grouping (0=disabled, 1=enabled)
# Groups alerts within the same e-mail.
maild.groupping=1


On Thu, May 6, 2010 at 9:57 AM, Assaf Flatto <[email protected]> wrote:
Hello

Every once in a while i am getting emails titled "OSSEC Notification -
(Agent name) xx.xx.xx.xx. - Alert level 10" and the email is a long list
of lower lever alerts - mostly 2 and 3 , with no alert in the email
body with the severity indicated in the title.

I seem to remember that during the installation there was a question
regarding aggregation , is this what the result of aggregation ?

How can it be turned off ?

Thanks

--

Assaf Flatto
Linux System Administrator
No.9 | 6 Portal Way | London | W3 6RU |
T: +44 (0)20 88 96 8014 | M: +44 (0)75 3568 1067


I am doing a Charity Bike ride On the 27 of June for the
Capital to Coast Charity. Please help by Donating
http://www.justgiving.com/Lovefilm-capital-to-coast


________________________________

LOVEFiLM UK Limited is a company registered in England and Wales.
Registered Number: 06528297.
Registered Office: No.9, 6 Portal Way, London W3 6RU, United Kingdom.

This e-mail is confidential to the ordinary user of the e-mail address to
which it was
addressed. If you have received it in error, please delete it from your
system and notify
the sender immediately.

This email message has been delivered safely and archived online by
Mimecast.
For more information please visit http://www.mimecast.co.uk

________________________________


--

Assaf Flatto Linux System Administrator
No.9 | 6 Portal Way | London | W3 6RU |
T: +44 (0)20 88 96 8014 | M: +44 (0)75 3568 1067


I am doing a Charity Bike ride On the 27 of June for the Capital to Coast Charity. Please help by Donating http://www.justgiving.com/Lovefilm-capital-to-coast

Reply via email to