On Mon, Apr 18, 2016 at 11:24 AM, theresa mic-snare <[email protected]> wrote: > Hi all, > > I've configured reportd to send reports on syscheck and successful > authentication > > <reports> > <category>authentication_success</category> > <title>OSSEC: Authentication Report</title> > <email_to>[email protected]</email_to> > <showlogs>yes</showlogs> > </reports> > > <reports> > <category>syscheck</category> > <title>Daily report: File changes</title> > <email_to>[email protected]</email_to> > </reports> > > > However, I can run those reports fine in the terminal, but it doesn't send > any reports through email. > > Yes: I have checked that ossec-maild is running.... it is, I swear! > Yes: I have checked the spam/junk folder in my inbox as well.... I swear! > > When I run reportd manually it displays the report just fine....and even in > the logs it says > > 2016/04/18 17:13:49 ossec-reportd: INFO: Report completed. Creating > output... > > I'd expect it at least to say this after I restart OSSEC as well? > > When does ossec-reportd run or does it have to be started through a cronjob? > Does the mailing of reports work for you? >
The last time I used it, I believe it would send out reports shortly after midnight. > best, > theresa > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
