[ossec-list] Re: weird stuff

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

Hi Nicolas,

It is not really random, since we use the hostname from the highest
alert from the e-mail. You can disable grouping in the 1.1 beta,
by setting maild.groupping to 0 in the internal_options.conf file.

Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net

On 2/21/07, Nicolas Arias <nicolas.arias@xxxxxxxxxxx> wrote:
> Cheers guys, looks that you shoot in the spot.
>
> Now, im looking the alerts, and in a mail with 10 alerts, the mail
> subject is set just for by 1 alert and is random.
>
> IS there any way of disabling alerts grouping???
>
> Cheers!
>
> Nico.
>
>
> On Tue, 2007-02-20 at 21:53 -0500, Michael Starks wrote:
> > Nicolas Arias wrote:
> > > Hello guys!
> > >
> > > From time to time i recieve alerts that in the subject shows a server,
> > > and in the alert body shows another server.
> >
> > Hey Nicolas,
> >
> > This happens when multiple alerts are sent in the same e-mail.  The
> > subject line will have the hostname of the last alert received.
> >
> > -Mike
> --
> Nicolas Arias
> Security  Officer
> +54 11 4109 1885
> +54 9 11 5455 0055
> nicolas.arias@xxxxxxxxxxx