I have the following configuration in my OSSEC v2.3 config:
<global>
<email_notification>yes</email_notification>
<smtp_server>outbound-smtp-server</smtp_server>
<email_from>os...@hids</email_from>
<email_to>my email address</email_to>
</global>
<email_alerts>
<level>0</level>
<email_to>testaccount</email_to>
<do_not_group />
<do_not_delay />
</email_alerts>
Emails are being sent successfully to the global address, but to the
granular address, nothing is arriving. As a test senario, I have the
following settings for my alerting section:
<alerts>
<log_alert_level>1</log_alert_level>
<email_alert_level>0</email_alert_level>
</alerts>
So I can debug this issue. My end goal is to be able to send emails to a
specific address upon any file integrity alerts that are generated, but for
now getting any emails sent to the granular email address specified would be
great.
Any ideas?
Thanks,
Sonny Stormes