Did you restart ossec after changing that on the server? I didn't change that setting on my system, but it worked in the past.
On Tue, May 11, 2010 at 7:00 AM, Assaf Flatto <[email protected]> wrote: > I already changed it > # Maild grouping (0=disabled, 1=enabled) > # Groups alerts within the same e-mail. > maild.groupping=0 > > And now i am getting log mails with about 20 - 30 alerts in them with > only 1 in the error level indicated. > > how can i make it that i do not get those long report emails ? > > Assaf > >
