I'm seeing the same problem. Level 5 and 7 alerts in an email with the subject claiming level 10. To change the aggregation setting, edit /var/ossec/etc/internal_options.conf
# Maild grouping (0=disabled, 1=enabled) # Groups alerts within the same e-mail. maild.groupping=1 On Thu, May 6, 2010 at 9:57 AM, Assaf Flatto <assaf.fla...@lovefilm.com> wrote: > Hello > > Every once in a while i am getting emails titled "OSSEC Notification - > (Agent name) xx.xx.xx.xx. - Alert level 10" and the email is a long list > of lower lever alerts - mostly 2 and 3 , with no alert in the email > body with the severity indicated in the title. > > I seem to remember that during the installation there was a question > regarding aggregation , is this what the result of aggregation ? > > How can it be turned off ? > > Thanks > > -- > > Assaf Flatto > Linux System Administrator > No.9 | 6 Portal Way | London | W3 6RU | > T: +44 (0)20 88 96 8014 | M: +44 (0)75 3568 1067 > > > I am doing a Charity Bike ride On the 27 of June for the > Capital to Coast Charity. Please help by Donating > http://www.justgiving.com/Lovefilm-capital-to-coast > > > ________________________________ > > LOVEFiLM UK Limited is a company registered in England and Wales. > Registered Number: 06528297. > Registered Office: No.9, 6 Portal Way, London W3 6RU, United Kingdom. > > This e-mail is confidential to the ordinary user of the e-mail address to > which it was > addressed. If you have received it in error, please delete it from your > system and notify > the sender immediately. > > This email message has been delivered safely and archived online by > Mimecast. > For more information please visit http://www.mimecast.co.uk > > ________________________________
