Take a look at "src/os_maild/maild.c", OS_Run(), after line 387. You may be
able to insert a space or a line after each message by modifying the source
code.
387 /* Receive message from queue */
388 if((msg = OS_RecvMailQ(fileq, p, mail, &msg_sms)) != NULL)
389 {
390 /* If the e-mail priority is do_not_group, we first will
391 * flush all previous entries and then send it.
392 * We use s_msg to hold the pointer to the message
393 * while we flush it.
394 */
395 if(mail->priority == DONOTGROUP)
396 {
397 s_msg = msg;
398 }
399 else
400 {
401 OS_AddMailtoList(msg);
402 }
On Thursday, December 27, 2012 3:41:48 AM UTC-8, Moussa KINDA wrote:
>
> Hi Daniel,
>
> I have installed ossec for a company and the administrators find that
> it is difficult to read the email messages. This because the format of
> the message doesn't allow separation of the logs that are grouped.
>
> How can I put a space (or a line for example) between the logs that
> are grouped in an email message ?
>
> Best regards.
>
