Hmm, I haven't had problems with that in my environment. I have active responses set up that fire regardless on if a mail was triggered or not. The configuration for emails and active responses are in different blocks and don't necessarily rely on the level of a alert to trigger (I prefer using groups). I don't know if the log_alert_level setting could affectactive responses if set too high, I'd have to have a look at the sourcecode to figure that out (or maybe someone else here knows it off hand).
On 9/25/2015 4:51 PM, BP9906 wrote:
Am I able to trigger an active response without having an email alert generated?In previous versions, I noticed if I put the level too low (like 5) it wont trigger an active response because an email was not generated.Is there a way to do this? Thank you, Brian -- ---You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com <mailto:ossec-list+unsubscr...@googlegroups.com>.For more options, visit https://groups.google.com/d/optout.
----- You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
smime.p7s
Description: S/MIME Cryptographic Signature
