On Mon, Jan 27, 2020 at 1:47 AM Burkhard Schultheis <burkhard.schulth...@web.de> wrote: > > We have 3 servers running OSSEC (standalone). One server runs CentOS 6, > the two others opensuse 15.1. The configuration of OSSEC is almost > identical on all three servers (as close as possible). > > The CentOS Server sends a lot of emails, one of the opensuse servers few > and the third server (opensuse) no emails. But in the log I see issues > they should lead to sending an email. > > The server is able to send emails to the configured server. I see no > messages about errors sending emails. In /var/ossec/etc there is a copy > of resolv.conf. OSSEC version is 3.3.0. > > What can I do? >
Are they sending to the same smtp server? If you have access to the mail server logs, you could check there. Otherwise, you could use tcpdump to see if there are any issues. > Regards > Burkhard > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/e09db76d-cd10-5399-8d05-255480e9fba5%40web.de. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAMyQvMpcObZ0J6v_9TgbirgEVDOWR3PiNoryin4rpU-O-vjxRg%40mail.gmail.com.
