On Sat, Jan 21, 2012 at 8:30 AM, Hugo Deprez <[email protected]> wrote: > Dear community, > > I just setup a ossec server with the following e-mail alerting settings : > > <ossec_config> > <global> > <email_notification>yes</email_notification> > <email_to>[email protected]</email_to> > <smtp_server>smtp.domain.com</smtp_server> > <email_from>[email protected]</email_from> > </global> > > > <alerts> > <log_alert_level>1</log_alert_level> > <email_alert_level>7</email_alert_level> > </alerts> > > I am still receinving e-mail alerts for level 2 for example. > Does the log_alert_level parameter doing this ? > > Regards, > > Hugo
Rule 1002 perhaps? It has an option set to always email.
