Is the purpose of the granular email options to specify additional
contacts, or can it also be used to override the global
"email_alert_level"?

I have the "email_alert_level" set to 7, however I'd like to receive
notifications on particular alerts below level 7.  Will the
<email_alerts> specific options be able to override that?

I have found that this is not working in 2.6-beta

    <email_alerts>
        <email_to>treydock@xxxxx</email_to>
        <group>active_response</group>
    </email_alerts>

It may be I misunderstand the purpose of the email_alerts options.

Would the alternative be to override all the active_response rules and
add the <options>alert_by_email</options> ?  This leads me to another
question...when overriding built in rules using local_rules.xml should
the entire rule be re-stated or can I simply put in the parts I'd like
to override and they will be merged with the built-in rules?

Thanks
- Trey

Reply via email to