Today I installed OSSEC on my server and I have these settings:
<global>
<email_notification>yes</email_notification>
<email_to>[email protected]</email_to>
<smtp_server>localhost</smtp_server>
<email_from>ossecm@scaver</email_from>
</global>
<email_alerts>
<email_to>[email protected]</email_to>
<level>7</level>
</email_alerts>
Near the end of the file I have these lines as well:
<alerts>
<log_alert_level>1</log_alert_level>
<email_alert_level>8</email_alert_level>
</alerts>
But with these settings I get an email from OSSEC every 5 seconds and it's
a Level 2 alert. What do I need to configure so that I only get an email
for level 7 and above?
Thanks,
Evan
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
