AFAIK not possible within OSSEC. If it's always the same people you could make a maillinglist on your mailserver and send it to that.

On 10/14/2013 2:08 PM, Lalbee99 wrote:
When configuring email alerts is there anyway to incorporate more than a single email address per email_alert. In example, I have 3 users that need to receive email alerts from the servers: magnum1 and magnum2. I don't want to write three separate email_alerts for the same machines (tedious.)
 <email_alerts>
   <email_to></email_to>
<email_to>[email protected]</email_to>
<event_location>magnum1|magnum2</event_location>
   <level>6</level>
   <do_not_delay />
 </email_alerts>

<email_alerts>
   <email_to></email_to>
<email_to>[email protected]</email_to>
<event_location>magnum1|magnum2</event_location>
   <level>6</level>
   <do_not_delay />
 </email_alerts>
<email_alerts>
   <email_to></email_to>
<email_to>[email protected]</email_to>
<event_location>magnum1|magnum2</event_location>
   <level>6</level>
   <do_not_delay />
 </email_alerts>

-Leo

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to