Op 24/04/2011 22:22, moazami schreef:
I am beginner to ossec.
Is email alerts for server type only or it is for local type too?
why alerts log for me but don't email to me? can i placed email
address, my gmail address, and smtp server be gmail smtp server?
thanks a lot.
Hello,
ossec can "always" use email notification.If you do not receive emails
but you did enable them while installing have a look at
tail /var/ossec/logs/ossec.log (Linux servers) also make sure the user
that's running ossec-maild has permission to send emails (eg your firewall)
ps aux | grep ossec <<-- this will tell you which user
you can confgure ossec to use a gmail account
http://www.ossec.net/wiki/Tweaking_OSSEC
Erik
