I set up a OSSEC server along with an remote agent. The alert log file is populated with alerts regarding both the host and the agent. However, the integrated slack notification script only send reports regarding the host. The only difference within the log is how the hostnames are displayed, e.g., 2017-05-10, host-ossec.com.. and 2017-05-10, (agent-ossec.com). Is there anything i'm missing regarding my setup which causes the script to dismiss the agent alerts? Any tip or help is greatly appreciated.
Kind regards, Fredrik -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
