Op woensdag 19 februari 2014 13:50:47 UTC+1 schreef dan (ddpbsd): > > On Wed, Feb 19, 2014 at 7:21 AM, Michiel van Es > <[email protected]<javascript:>> > wrote: > > Hello, > > > > I am looking at the email alerting option. > > I've looked at the thread at > > https://groups.google.com/forum/#!topic/ossec-list/Q55ZGg6tfj0 but I am > not > > sure how to fix the following: > > > > - send all alerts from level =>15 > > - send to [email protected] <javascript:> > > > > All other alerts should not be mailed. > > As I understand above threat you need to have 2 email adresses? > > - 1 global email adres that received all OSSEC alerts > > - 1 specific configuration for another email adress that receives alerts > => > > 15 > > > > Is that correct? > > > > No, that is not correct. > > > Would my config be: > > > > <global> > > <email_notification>yes</email_notification> > > <email_to>[email protected] <javascript:></email_to> > > <smtp_server>localhost</smtp_server> > > <email_from>[email protected] <javascript:></email_from> > > </global> > > > > <alerts> > > <log_alert_level>1</log_alert_level> > > </alerts> > > > > <email_alerts> > > <email_to>[email protected] <javascript:></email_to> > > <level>15</level> > > </email_alerts> > > > > Thanks for the help. > > > > You could do it that way if you want. You could also set > email_alert_level to 15 and keep just the <global> email address. > > http://ossec.net/doc/syntax/head_ossec_config.alerts.html#element-email_alert_level > >
Makes sense. Thanks! > > > Michiel > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/groups/opt_out. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
