Thank you Dan for responding to me. Here is an example of one email that I received :
*Objet : OSSEC Notification - (serverA) 172.16.52.110 - Alert level 8 OSSEC HIDS Notification. 2013 Jul 28 04:59:55 Received From: (serverB) xxx.xxx.xxx.xxx->/usr/local/zend/var/log/php.log Rule: 31407 fired (level 5) -> "PHP Notice." Portion of the log(s): [28-Jul-2013 04:55:32] PHP Notice: Undefined variable: searchedRequest in /var/www/html/myDirectory/Inbox.php on line 509 Received From: (serverA) xxx.xxx.xxx.xxx->/etc/httpd/logs/error_log Rule: 31407 fired (level 5) -> "Attempt to access an non-existent file (those are reported on the access.log)." Portion of the log(s): [28-Jul-2013 04:55:37] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/www/html/myDirectory/favicon.ico* Like you can see in the object of this email, normally the notifications are about serverA but i also receive notifications about serverB in the same email. I would like to receive one email by server. One email for serverA notifications and one email for serverB notifications. Do you understand ? Thanks in advance. Mr SCOTTO Rodolphe. Le lundi 26 août 2013 15:32:02 UTC+2, scott rod a écrit : > > Hello, > > Today I have 3 slave servers and 1 master server. > I receive one email by hour. > But i would like to receive one email by hour and by server. > How can I do ? > > Thanks in advance. > > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
