Which alerts is it? does the alert has a "alert_by_email" by any chance?
On Thu, Apr 10, 2014 at 9:03 PM, Evan <[email protected]> wrote: > Today I installed OSSEC on my server and I have these settings: > > <global> > <email_notification>yes</email_notification> > <email_to>[email protected]</email_to> > <smtp_server>localhost</smtp_server> > <email_from>ossecm@scaver</email_from> > </global> > > <email_alerts> > <email_to>[email protected]</email_to> > <level>7</level> > </email_alerts> > > Near the end of the file I have these lines as well: > > <alerts> > <log_alert_level>1</log_alert_level> > <email_alert_level>8</email_alert_level> > </alerts> > > But with these settings I get an email from OSSEC every 5 seconds and it's > a Level 2 alert. What do I need to configure so that I only get an email > for level 7 and above? > > Thanks, > Evan > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
