Hi all, I've configured reportd to send reports on syscheck and successful authentication
<reports> <category>authentication_success</category> <title>OSSEC: Authentication Report</title> <email_to>[email protected]</email_to> <showlogs>yes</showlogs> </reports> <reports> <category>syscheck</category> <title>Daily report: File changes</title> <email_to>[email protected]</email_to> </reports> However, I can run those reports fine in the terminal, but it doesn't send any reports through email. Yes: I have checked that ossec-maild is running.... it is, I swear! Yes: I have checked the spam/junk folder in my inbox as well.... I swear! When I run reportd manually it displays the report just fine....and even in the logs it says 2016/04/18 17:13:49 ossec-reportd: INFO: Report completed. Creating output... I'd expect it at least to say this after I restart OSSEC as well? When does ossec-reportd run or does it have to be started through a cronjob? Does the mailing of reports work for you? best, theresa -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
