On Mon, Nov 17, 2014 at 2:09 AM, <[email protected]> wrote: > no,nothing error,/ossec/bin/ossec-reportd -t test ok! >
So you're getting the expected output? Are you getting alert emails to the email address you expect to get the report? > > On Thursday, November 13, 2014 5:13:19 PM UTC+8, [email protected] wrote: >> >> hi,all >> >> my ossec.conf like this >> >> >> <reports> >> <level>8</level> >> <title>Soc Daily Report</title> >> <showlogs>yes</showlogs> >> <email_to>[email protected]</email_to> >> </reports> >> >> >> >> and ossec.log >> >> >> 2014/11/10 15:00:55 ossec-testrule: INFO: Reading local decoder file. >> 2014/11/10 15:00:55 ossec-testrule: INFO: Started (pid: 8747). >> 2014/11/11 00:00:38 ossec-monitord: INFO: Starting daily reporting for >> 'Soc Daily Report' >> 2014/11/11 11:01:43 rootcheck: INFO: Starting rootcheck scan. >> 2014/11/11 11:17:58 rootcheck: INFO: Ending rootcheck scan. >> 2014/11/11 12:42:58 ossec-syscheckd: INFO: Starting syscheck scan. >> 2014/11/11 12:50:25 ossec-syscheckd: INFO: Ending syscheck scan. >> >> >> >> see ossec-monitord starting,but no email send me.. >> >> i see ossec/logs/ some .report... file and nothing in file.. >> >> >> so how can i do? > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
