Re: [ossec-list] Using active-response instead of email alerts

2016-09-29 Thread dan (ddp)
On Wed, Sep 28, 2016 at 2:29 PM, Laura Herrera wrote: > Hi guys, > > I need to get ossec to use a script every time that an alert is fired by any > of my servers. > > There is an example of this in > http://ossec-docs.readthedocs.io/en/latest/manual/ar/ar-custom.html > which uses a script on the s

[ossec-list] Using active-response instead of email alerts

2016-09-28 Thread Laura Herrera
Hi guys, I need to get ossec to use a script every time that an alert is fired by any of my servers. There is an example of this in http://ossec-docs.readthedocs.io/en/latest/manual/ar/ar-custom.html which uses a script on the server when a specific rule is fired. How can i make that generic,