[ossec-list] Re: Ossec Problem: email_alert_level not being honored. Alert level 3 received in mail.

[Clayton Dillard <cdillard@xxxxxxxxxxxxxxxxx>]

I too have this issue.  My ossec.conf file is the same as Frank's
(defaults) and yet I receive alerts daily that are at levels below 7.  I
have a server/agent setup.

Thanks,

- Cheers
Clayton Dillard

Frank Spierings wrote:
> Hi people,
>
> I have a problem with my OSSEC server.
> The ossec.conf is pretty default. I only changed the email to address.
>
> This is the only alerts group in the file:
>   <alerts>
>     <log_alert_level>1</log_alert_level>
>     <email_alert_level>7</email_alert_level>
>   </alerts>
>
> Still I'm receiving "ossec agent started" emails from the server,
> which are level 3. I checked out the specific rule, but I dont see any
> indication why it should send me these mails.
> Any idea where I should start my quest?
>
> Thanks,
>
> Frank Spierings
>
>