On Tue, Aug 11, 2015 at 7:17 AM, C0rn123 <[email protected]> wrote: > > > Am Dienstag, 11. August 2015 12:47:25 UTC+2 schrieb C0rn123: >> >> Hello, >> >> I want to turn off ANY emails below a certain alert level. Unfortunately >> the alert_by_email option in a lot of rules overwrites the minimum alert >> level set in the ossec.conf. The documentation of OSSEC says you can either >> overwrite every rule with the no_email_option or write an own rule to not >> receive emails of that levels anymore. However its nowhere in the >> documentation (as far as i have seen) stated how to do this and i couldnt >> find it anywhere else. Hope you can help me. >> >> greets, >> corn > > > For clarification - i dont want to overwrite every rule that has > alert_by_email option, but write a rule to not receive emails of that > levels. >
There's no way to turn that off globally. You can write rules one by one. If you don't mind re-doing work after any upgrades, you can remove the options straight from the rules, but those files get overwritten during upgrades. > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
