I'm not server if this is a problem with the OSSEC configuration or the host itself, but there are some events where the logs or full message only have some of the information I need. For example, this will be the full message I receive (2016-02-03 14:16:35 status installed some_package). The email alert will give me the agent name it sent it from, but I am not receiving the hostname as well. It seems to be that most events do give the full message, but I'm starting to notice some that don't so wondering if I should be looking to fix this on the OSSEC side or making sure the system is fully logging or sending everything over. Thanks!
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
