On Thu, May 13, 2010 at 8:49 PM, Michael Starks <[email protected]> wrote: > dan (ddp) wrote: >> I'm seeing the same problem. Level 5 and 7 alerts in an email with the >> subject claiming level 10. > > I wonder if what is happening is that some of the alerts that went into > generating the event didn't make it into the e-mail. I don't think OSSEC > will necessarily put all of them into the e-mail. Notice the "Portion of > the log(s):" line in the alerts. > > -- > Michael Starks > [I] Immutable Security > http://www.immutablesecurity.com >
Interesting, hadn't thought about that.
