Hello, I am looking at the email alerting option. I've looked at the thread at https://groups.google.com/forum/#!topic/ossec-list/Q55ZGg6tfj0 but I am not sure how to fix the following:
- send all alerts from level =>15 - send to [email protected] All other alerts should not be mailed. As I understand above threat you need to have 2 email adresses? - 1 global email adres that received all OSSEC alerts - 1 specific configuration for another email adress that receives alerts => 15 Is that correct? Would my config be: <global> <email_notification>yes</email_notification> <email_to>[email protected]</email_to> <smtp_server>localhost</smtp_server> <email_from>[email protected]</email_from> </global> <alerts> <log_alert_level>1</log_alert_level> </alerts> <email_alerts> <email_to>[email protected]</email_to> <level>15</level> </email_alerts> Thanks for the help. Michiel -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
