[ossec-list] Re: Ossec Problem: email_alert_level not being honored. Alert level 3 received in mail.

[Josh Drummond <jdrummon@xxxxxxx>]

Check out "<options>alert_by_email</options>" in your rules/ossec_rules.xml

At 12:22 PM 7/13/2007, Frank Spierings wrote:

>Hi people,
>
>I have a problem with my OSSEC server.
>The ossec.conf is pretty default. I only changed the email to address.
>
>This is the only alerts group in the file:
>   <alerts>
>     <log_alert_level>1</log_alert_level>
>     <email_alert_level>7</email_alert_level>
>   </alerts>
>
>Still I'm receiving "ossec agent started" emails from the server,
>which are level 3. I checked out the specific rule, but I dont see any
>indication why it should send me these mails.
>Any idea where I should start my quest?
>
>Thanks,
>
>Frank Spierings