Is the purpose of the granular email options to specify additional
contacts, or can it also be used to override the global
"email_alert_level"?
I have the "email_alert_level" set to 7, however I'd like to receive
notifications on particular alerts below level 7. Will the
<email_alerts> specific options be able to override that?
I have found that this is not working in 2.6-beta
<email_alerts>
<email_to>treydock@xxxxx</email_to>
<group>active_response</group>
</email_alerts>
It may be I misunderstand the purpose of the email_alerts options.
Would the alternative be to override all the active_response rules and
add the <options>alert_by_email</options> ? This leads me to another
question...when overriding built in rules using local_rules.xml should
the entire rule be re-stated or can I simply put in the parts I'd like
to override and they will be merged with the built-in rules?
Thanks
- Trey