Turn off email grouping. In /var/ossec/etc/internal_options.conf set:
maild.groupping=0
You may need to bump the max emails per hour, depending on how many
alerts you normally get.
On Tue, Jul 26, 2011 at 10:59 AM, Chris Phillips
wrote:
> Hi All,
>
> I have set up a central “server” and several
ist@googlegroups.com [mailto:ossec-list@googlegroups.com] On
Behalf Of dan (ddp)
Sent: 26 July 2011 20:21
To: ossec-list@googlegroups.com
Subject: Re: [ossec-list] Notification alert email subject misleading
Turn off email grouping. In /var/ossec/etc/internal_options.conf set:
maild.groupping=0
roups.com] On
> Behalf Of dan (ddp)
> Sent: 26 July 2011 20:21
> To: ossec-list@googlegroups.com
> Subject: Re: [ossec-list] Notification alert email subject misleading
>
> Turn off email grouping. In /var/ossec/etc/internal_options.conf set:
> maild.groupping=0
>
> You ma
Many thanks,
I have set it to: 3600
--
ChrisP
-Original Message-
From: ossec-list@googlegroups.com [mailto:ossec-list@googlegroups.com] On
Behalf Of dan (ddp)
Sent: 27 July 2011 00:37
To: ossec-list@googlegroups.com
Subject: Re: [ossec-list] Notification alert email subject misleading