Awesome, thanks for the tip Dan! I will look for it tonight, if it actually works and does send a report, then I will send a PR with a disclaimer on the documentation page, because it isn't mentioned there yet.
I have also looked at the code to see if I could find any indicator when the email would be sent...but alas, I haven't found anything there either. Am Montag, 18. April 2016 17:24:37 UTC+2 schrieb theresa mic-snare: > > Hi all, > > I've configured reportd to send reports on syscheck and successful > authentication > > <reports> > <category>authentication_success</category> > <title>OSSEC: Authentication Report</title> > <email_to>[email protected]</email_to> > <showlogs>yes</showlogs> > </reports> > > <reports> > <category>syscheck</category> > <title>Daily report: File changes</title> > <email_to>[email protected]</email_to> > </reports> > > > However, I can run those reports fine in the terminal, but it doesn't send > any reports through email. > > Yes: I have checked that ossec-maild is running.... it is, I swear! > Yes: I have checked the spam/junk folder in my inbox as well.... I swear! > > When I run reportd manually it displays the report just fine....and even > in the logs it says > > 2016/04/18 17:13:49 ossec-reportd: INFO: Report completed. Creating > output... > > I'd expect it at least to say this after I restart OSSEC as well? > > When does ossec-reportd run or does it have to be started through a > cronjob? > Does the mailing of reports work for you? > > best, > theresa > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
