Hi Louis, Ossec by default will use the hostname that was present in the log generated (which for the local install should be equal to /etc/hostname). What are you getting right now? You can easily modify it by changing src/os_maild/maild.h if you want. hope it helps. -- Daniel B. Cid dcid ( at ) ossec.net On 3/22/07, Louis Voo <jlvoo@xxxxxxxxx> wrote:
Hello, I'm new to OSSEC. It took me lot of time to find out swatch replacement, and OSSEC is so easy to setup. I have setup OSSEC as local running on my server. Now anything happen it will send mail to me. I wonder whether I can change the mail subject or not. I want to change the subject to use the HOSTNAME dynamically from /etc/hostname, is this possible? Regards Louis