Thanks for that Dan Cheers
On 2 December 2013 14:53, dan (ddp) <[email protected]> wrote: > On Mon, Dec 2, 2013 at 9:41 AM, Morgan Cox <[email protected]> wrote: > > Hi > > > > > >> Are you hitting the max emails per hour limit (10 I think)? > > > > Yes I will be - how do I increase this ? Or better still remove the > limit ? > > > > Regards > > > > set email_maxperhour to a higher number (apparently 12 is the default). > > http://www.ossec.net/doc/syntax/head_ossec_config.global.html#element-email_maxperhour > > > > > > > > > On 2 December 2013 14:16, dan (ddp) <[email protected]> wrote: > >> > >> On Wed, Nov 27, 2013 at 1:02 PM, morgan cox <[email protected]> > wrote: > >> > Hi > >> > > >> > I have installed Ossec 2.7.1 Server + Agent > >> > > >> > Over night on a server it found about 8 different outdated wordpress > >> > installs but I did not get emailed the alerts. > >> > > >> > i.e I can see alerts in the alert.log, but no email notification. > >> > > >> > I get - /var/ossec/logs/alerts/alerts.log:System Audit: Web > >> > vulnerability - > >> > Outdated WordPress installation. File: > >> > /var/www/vhosts/donain.name/httpdocs/blog-old/wp-includes/version.php > . > >> > Reference: http://sucuri.net/latest-versions . > >> > > >> > 'Rule: 519 (level 7) -> 'System Audit: Vulnerable web application > >> > found.' > >> > > >> > but no email... > >> > > >> > I am getting lots of level2 email alerts though (rule 1002) so email > >> > alters generally are working. > >> > > >> > Can anyone suggest why I am not getting the level 7 alerts ? > >> > > >> > cheers > >> > > >> > >> Are you hitting the max emails per hour limit (10 I think)? > >> > >> > -- > >> > > >> > --- > >> > You received this message because you are subscribed to the Google > >> > Groups > >> > "ossec-list" group. > >> > To unsubscribe from this group and stop receiving emails from it, send > >> > an > >> > email to [email protected]. > >> > For more options, visit https://groups.google.com/groups/opt_out. > >> > >> -- > >> > >> --- > >> You received this message because you are subscribed to the Google > Groups > >> "ossec-list" group. > >> To unsubscribe from this group and stop receiving emails from it, send > an > >> email to [email protected]. > >> For more options, visit https://groups.google.com/groups/opt_out. > > > > > > -- > > > > --- > > You received this message because you are subscribed to the Google Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [email protected]. > > For more options, visit https://groups.google.com/groups/opt_out. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
