Hi Sean,
Have you configured the global email options in the <global> section?
You should have something like this:
<ossec_config>
<global>
<email_notification>yes</email_notification>
<email_to>[email protected]</email_to>
<smtp_server>mail.test.com.</smtp_server>
<email_from>[email protected]</email_from>
</global>
...
</ossec_config>
In case you want to use an email that uses SMTP authentication you will
need to configure a server relay
<https://documentation.wazuh.com/current/user-manual/manager/output-options/manual-email-report/smtp_authentication.html#smtp-authentication>
.
You can find more info about how to configure your manager to send email
alerts or reports here
<https://documentation.wazuh.com/current/user-manual/manager/output-options/manual-email-report/smtp_authentication.html#smtp-authentication>
.
Let me know if you have more questions!
Rocio
On Tuesday, July 11, 2017 at 8:53:37 AM UTC-7, Sean Roe wrote:
>
> Hi all,
>
> I am trying to troubleshoot why I am not getting any daily reports and Im
> not really sure how to troubleshoot it. I have looked in the logs and I
> see entries like:
>
> 2017/07/11 00:01:34 ossec-monitord: INFO: Starting daily reporting for
> 'Daily report: File changes'
> 2017/07/11 00:01:54 ossec-monitord: INFO: Starting daily reporting for
> 'Daily report: File changes'
>
>
> but I am not getting any output in my email. Here is the stanza from
> ossec.conf on the server:
>
> <reports>
> <category>syscheck</category>
> <title>Daily report: File changes</title>
> <email_to>[email protected]</email_to>
> <email_to>[email protected]</email_to>
> </reports>
>
> so any guidance would be helpful.
>
> Thanks,
> Sean
>
>
>
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
