Yes ,i restarted the ossec server by issueing the /etc/init.d/ossec restart command

but i still am getting those long emails with dozens of alerts in them but only one of them in the listed alert level.

Is there any other parameter that can affect this behaviour ?

Assaf

dan (ddp) wrote:
Did you restart ossec after changing that on the server? I didn't
change that setting on my system, but it worked in the past.

On Tue, May 11, 2010 at 7:00 AM, Assaf Flatto <[email protected]> wrote:
I already changed it
# Maild grouping (0=disabled, 1=enabled)
# Groups alerts within the same e-mail.
maild.groupping=0

And now i am getting log mails with about 20 - 30 alerts in them with
only 1 in the error level indicated.

how can i make it that i do not get those long report emails ?

Assaf




--

Assaf Flatto Linux System Administrator
No.9 | 6 Portal Way | London | W3 6RU |
T: +44 (0)20 88 96 8014 | M: +44 (0)75 3568 1067


I am doing a Charity Bike ride On the 27 of June for the Capital to Coast Charity. Please help by Donating http://www.justgiving.com/Lovefilm-capital-to-coast

-----------------------------------------------------------------------------------------------------------------------------------------
LOVEFiLM UK Limited is a company registered in England and Wales. Registered Number: 06528297. Registered Office: No.9, 6 Portal Way, London W3 6RU, United Kingdom.

This e-mail is confidential to the ordinary user of the e-mail address to which it was addressed. If you have received it in error, please delete it from your system and notify the sender immediately.

This email message has been delivered safely and archived online by Mimecast.
For more information please visit http://www.mimecast.co.uk -----------------------------------------------------------------------------------------------------------------------------------------

Reply via email to