On Fri, Mar 18, 2016 at 10:40 AM, sandeep dubey <sandeep.san...@gmail.com> wrote: > Hi, > > I am running OSSEC version 2.8.3-3trusty on 100+ node on AWS EC2. Recently i > noticed that alerts are not being sent from ossec, not even single. It was > working fine couple of days earlier. While digging into this i observed that > it not working for an email group but working for individual email ids. > > Can some help to identify the issue and fix it. The same setup with same > email group is working at another system. The only different between these > two setups are that one has 100+ server where is has stopped working and > another has 15-20 nodes where it is working. > > I tried by restarting ossec services, ossec-maild is working, local sendmail > service is also working, test emails are going fine. >
Does ossec-maild attempt to send anything? > > Current configuration is - > > <global> > <email_notification>yes</email_notification> > <email_to>x...@domain.com</email_to> > <email_to>a...@domain.com</email_to> > <email_to>1...@domain.com</email_to> > <smtp_server>localhost</smtp_server> > <email_from>oss...@ossec.domain.com</email_from> > </global> > - > - > - > - > <alerts> > <log_alert_level>1</log_alert_level> > <email_alert_level>8</email_alert_level> > </alerts> > > <email_alerts> > <email_to>cloud-t...@domain.com</email_to> > <level>8</level> > <do_not_delay /> > </email_alerts> > > -- > Regards, > Sandeep > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
