Here's the config, I'm not sure how to accomplish the same thing manually...any
pointers? TY
<ossec_config>
<reports>
<category>syscheck</category>
<title>Daily report: File Changes</title>
<email_to>[email protected]</email_to>
</reports>
This is what the body of the email used to get me:
Report 'Daily report: File Changes' completed.
------------------------------------------------
->Processed alerts: 318
->Post-filtering alerts: 1
->First alert: 2010 Apr 06 04:54:27
->Last alert: 2010 Apr 06 04:54:27
Top entries for 'Level':
------------------------------------------------
Severity 7 |1 |
Top entries for 'Group':
------------------------------------------------
ossec |1 |
syscheck |1 |
Top entries for 'Location':
------------------------------------------------
(GCS-GEOIP-WebSRV) 192.168.84.47->syscheck-r.. |1 |
Top entries for 'Rule':
------------------------------------------------
550 - Integrity checksum changed. |1 |
Cordially,
Christopher Gallant
System Administrator
2000Charge, Inc.
P: 626-585-1814 ext 107
Think before you Print!
On Jun 2, 2010, at 9:01 AM, dan (ddp) wrote:
> How are they configured?
> Have you tried running the reports manually?
>
> On Tue, Jun 1, 2010 at 5:14 PM, Christopher Gallant
> <[email protected]> wrote:
>> Greetings,
>> I have ossec 2.4.1 install on Ubuntu karmic. For some reason the daily
>> reports do not work anymore. The emails come in but the body is blank.
>> Could somebody point to me what I should check?-Thank You!
>>
>>
>>
>>
>
