On Mon, Dec 2, 2013 at 9:41 AM, Morgan Cox <[email protected]> wrote: > Hi > > >> Are you hitting the max emails per hour limit (10 I think)? > > Yes I will be - how do I increase this ? Or better still remove the limit ? > > Regards >
set email_maxperhour to a higher number (apparently 12 is the default). http://www.ossec.net/doc/syntax/head_ossec_config.global.html#element-email_maxperhour > > > > On 2 December 2013 14:16, dan (ddp) <[email protected]> wrote: >> >> On Wed, Nov 27, 2013 at 1:02 PM, morgan cox <[email protected]> wrote: >> > Hi >> > >> > I have installed Ossec 2.7.1 Server + Agent >> > >> > Over night on a server it found about 8 different outdated wordpress >> > installs but I did not get emailed the alerts. >> > >> > i.e I can see alerts in the alert.log, but no email notification. >> > >> > I get - /var/ossec/logs/alerts/alerts.log:System Audit: Web >> > vulnerability - >> > Outdated WordPress installation. File: >> > /var/www/vhosts/donain.name/httpdocs/blog-old/wp-includes/version.php. >> > Reference: http://sucuri.net/latest-versions . >> > >> > 'Rule: 519 (level 7) -> 'System Audit: Vulnerable web application >> > found.' >> > >> > but no email... >> > >> > I am getting lots of level2 email alerts though (rule 1002) so email >> > alters generally are working. >> > >> > Can anyone suggest why I am not getting the level 7 alerts ? >> > >> > cheers >> > >> >> Are you hitting the max emails per hour limit (10 I think)? >> >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google >> > Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> > an >> > email to [email protected]. >> > For more options, visit https://groups.google.com/groups/opt_out. >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/groups/opt_out. > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
