On Wed, Feb 19, 2014 at 7:21 AM, Michiel van Es <[email protected]> wrote: > Hello, > > I am looking at the email alerting option. > I've looked at the thread at > https://groups.google.com/forum/#!topic/ossec-list/Q55ZGg6tfj0 but I am not > sure how to fix the following: > > - send all alerts from level =>15 > - send to [email protected] > > All other alerts should not be mailed. > As I understand above threat you need to have 2 email adresses? > - 1 global email adres that received all OSSEC alerts > - 1 specific configuration for another email adress that receives alerts => > 15 > > Is that correct? >
No, that is not correct. > Would my config be: > > <global> > <email_notification>yes</email_notification> > <email_to>[email protected]</email_to> > <smtp_server>localhost</smtp_server> > <email_from>[email protected]</email_from> > </global> > > <alerts> > <log_alert_level>1</log_alert_level> > </alerts> > > <email_alerts> > <email_to>[email protected]</email_to> > <level>15</level> > </email_alerts> > > Thanks for the help. > You could do it that way if you want. You could also set email_alert_level to 15 and keep just the <global> email address. http://ossec.net/doc/syntax/head_ossec_config.alerts.html#element-email_alert_level > Michiel > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
