On Tue, Nov 10, 2015 at 3:19 AM, sabin ran <[email protected]> wrote: > hello. > > i have setup ossec 2.8.3 and in the configuration, the email alert has been > set to the more or equal to 7 value > > <alerts> > <log_alert_level>1</log_alert_level> > <email_alert_level>7</email_alert_level> > </alerts> > > But i am getting emails in for alert level 2 and less than 7. How to fix it? > thanks >
If the level 2 events you are seeing are from rule 1002, this is normal. This FAQ entry should provide some information, but please ask if you need more clarification. http://ossec.github.io/docs/faq/alerts.html#i-set-the-email-alert-level-to-10-why-do-i-keep-seeing-rules-with-lower-levels > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
