I saw a few comments about this but never an answer... When I run my daily reports - if it is run from inside of ossec-conf and email, no problems. I get the summary and that is all. Great. But if I try to run it by hand with something like:
cat /var/ossec/logs/alerts/alerts.log | ossec-reportd -n "Daily report" 2>&1 I get the summary, followed by the entire log file dump. Why?? I just want the summary. How do you turn that off? It's on RHEL 5.3 if that matters, but I can't see how it would. thoughts??
