On Thu, Jul 17, 2014 at 2:13 PM, Nguyễn Văn Hớn <honi...@gmail.com> wrote: > how to config that. please help me dan. tomorrow i have report with my > teacher. please help me :( >
How to config what? You currently configured any rules in the AdminOSSEC group to go to admi...@server.vn, and any rules level 10 or greater in that group to also go to admi...@server.vn. Is that not what you intended? Do you need help putting specific rules into that group? * Add them to the rule (http://ossec-docs.readthedocs.org/en/latest/syntax/head_rules.html#element-group) * Or add them to the rule grouping at the top of the rules file Do you want all alerts instead of just those in that group to go to the first email address? * Remove the group parameter from the config. Please be more clear as to what your intentions are. Doing your homework is very difficult without enough information. > Vào 01:00:08 UTC+7 Thứ sáu, ngày 18 tháng bảy năm 2014, Nguyễn Văn Hớn đã > viết: >> >> I have group " AdminOSSEC" and two user " adminQL" and " adminKH" >> mail two user that is admi...@server.vn and admi...@server.vn >> >> that is my config in server. i have restart ossec server but i don't have >> mail alert when config with group email. please help me. thank ! >> >> <alerts> >> <log_alert_level>3</log_alert_level> >> <email_alert_level>6</email_alert_level> >> </alerts> >> >> <email_alerts> >> <group>AdminOSSEC</group> >> <email_to>admi...@server.vn</email_to> >> </email_alerts> >> <email_alerts> >> <email_to>admi...@server.vn</email_to> >> <group>AdminOSSEC</group> >> <level>10</level> >> </email_alerts> >> >> <email_alerts> >> <email_to>syscheck-ad...@example.com</email_to> >> <group>syscheck</group> >> </email_alerts> > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
