Hi Holger, Take a look at the email_maxperhour setting in ossec.conf: http://www.ossec.net/main/manual/configuration-options
Regards, -- Doug Burks, GSE, CISSP | http://securityonion.blogspot.com President, Greater Augusta ISSA | http://augusta.issa.org On Thu, Nov 17, 2011 at 7:15 AM, Holger Gläß <[email protected]> wrote: > hi > > ossec send the standard "normal" notification mails for 15 in a hour , > then nothing and at the start of the next hour > i get one notification mail with all alerts for the that he don't send > the notfication. > > for example > > 12 pm - 12.15 -> normal working i get the notification close to the log > event. > > 12.16 - 12.59 no notifaction mails > > 13 on mail with all diffrent logs events for the time between > 12.16 and 12.59 . > > this ist regular and for every hour > > > please , i need advice. > > thanks > > holger > > p.s. sorry for my englisch it is not well. > > >
