[ossec-list] Re: New to OSSEC HIDS

[Leslie S Arvin <arvin@xxxxxxxxxx>]

I'd like to see it, and have already hacked this into the email subject
for Solaris and RedHat. But I don't know that my hack is cross-platform
compatible.  I used uname(2).

-- Leslie Arvin
    arvin@xxxxxxxxxx, Office: FREH G409, Phone: 765-496-3971
    Network Systems Administrator, ITI-Unix Platforms
    Purdue University, Information Technology at Purdue


Bill Long wrote:
> Hey folks,
> 
> I've just recently installed OSSEC HIDS on 3 of my unix machines. I LOVE 
> it. I do have one question though. I can't tell which server the emails 
> are coming from without looking at the actual email address(ie, the 
> FROM: header only shows OSSEC HIDS until I click the actual email). I'd 
> like to have some way to have the machine name show up either in the 
> subject or the FROM: header. I took a quick look at the code and it's an 
> easy fix to do that, but wanted to make sure it wasn't already 
> implemented some way.
> 
> If it's not, is it something anybody else would be interested in having?
> 
> thanks much,
> 
> bill
> 
> 
> 

--~--~---------~--~----~------------~-------~--~----~
-~----------~----~----~----~------~----~------~--~---