[Ossec-list] email-notification vs. email_notification

[kayvan at sylvan.com (Kayvan A. Sylvan)]

Hi Daniel,

Thanks for the reply.

I found the problem.

In src/analysisd/config.c, you have both "email_notification" and 
"email-notification".

The second one was set up by the installer as "email_notification" and
has no effect.

I changed it in ossec.conf to email-notification and it appears to work
as expected.

I propose a name change for this variable: email_alert_level

This will prevent this confusion in the future.

			---Kayvan

> On 4/6/06, Kayvan A. Sylvan <kayvan at sylvan.com> wrote:
> > On Thu, Apr 06, 2006 at 11:55:06AM -0300, Daniel Cid wrote:
> > > Are you still receiving e-mails from the level 7? Wait a little bit to make
> > > sure they still keep comming (they may be in smtp server queue).
> > > I just sent an email with more explanations... Make sure that you saved
> > > the file correctly and that ossec-analysisd was restarted (and that you
> > > don't have multiple instances of it running). Do a ps auwx |grep ossec
> > > and you should see only one instance of the ossec-analysisd...
> > >
> > > hope it helps.
> >
> > Yes, about 6 hours later, I am still seeing emails from the level 7.
> > They are freshly generated, too.
> >
> >                         ---Kayvan
> >

-- 
Kayvan A. Sylvan          | Proud husband of       | Father to my kids:
Sylvan Associates, Inc.   | Laura Isabella Sylvan, | Katherine Yelena (8/8/89)
http://sylvan.com/~kayvan | my beautiful Queen.    | Robin Gregory (2/28/92)