On Mon, Jun 1, 2015 at 12:15 PM, Todd Clementz <[email protected]> wrote: > Good Afternoon, > > > > Can anyone speak to when rules get processed. The scenario I have is I just > saw a message come in this morning that said there was a login that was > tried over the weekend. As I am trying to tune the software, I would think > that if there was a violation, the notification would come in right away, > but some rules seem to be delayed. > >
Alerts should generally fire right away. Could the delay have been from your mail server? > > Thank you, > > > > Todd Clementz > > ACLens > > IT Department > > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
