Hi there !!! Since u have set the tab <level>2</level>, so this means that u'll get all the emails related to alert level >=2.
Regards Tanishk -----Original Message----- From: ossec-list@googlegroups.com [mailto:ossec-l...@googlegroups.com] On Behalf Of Vlad Sent: Wednesday, June 16, 2010 8:29 AM To: ossec-list Subject: [ossec-list] email alert level question I have set the granular email alert optios to only sen email for alert > 2 (or at least that's what I'm trying to do. Could somebody please point out what I'm missin as I keep getting level 2 email alerts. Thanks ---------- config snippet ----------------------------------------- <global> <email_notification>yes</email_notification> <smtp_server>outbound-smtp-server</smtp_server> <email_from>os...@hids</email_from> <email_to>my email address</email_to> </global> <email_alerts> <level>2</level> <email_to>my email address</email_to> </email_alerts> <alerts> <log_alert_level>1</log_alert_level> <email_alert_level>7</email_alert_level> </alerts>