Yes. I fail SSH 3 times to get a level 10 alert. I wouldn't care to have a text alert either, but the group of engineers in my project prefer to not have to monitor the Web UI or use Splunk to do searches. An immediate alert to their phone is preferred if a server, table, or syslog file crashes.
Funny thing is, is I added this as well to see if I would get e-mails to my personal e-mail: <email_alerts> <email_to>[email protected]</email_to> <level>6</level> <do_not_delay /> </email_alerts> Still nothing.. I will continue to work on this... On Monday, June 17, 2013 12:39:40 PM UTC-4, dan (ddpbsd) wrote: > > On Mon, Jun 17, 2013 at 12:26 PM, David Blanton > <[email protected] <javascript:>> wrote: > > Just a quick update - within mail at the shell script (logged in as > root) > > I was able to send a text message to my cellphone via ##########@ > txt.att.net > > from the ossec-server. > > > > So I believe the issue would not be related to an internal issue related > to > > network but some sort of misconfiguration within OSSEC. > > > > It looks fine to me,but I don't use the sms stuff. Are you sure level > 6+ alerts are being triggered? > Could you try removing the sms/do_not_delay settings to see if those > change anything (restart the ossec processes after making the change)? > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/groups/opt_out. > > > > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
