Re: Multiple email recipients

Nicolas KRASINSKI <[email protected]>
Newsgroups gmane.comp.security.detection.bro
Message-ID <[email protected]>
Thanks, It works fine with MailAlarmsTo in broctl.cfg. 
But MailAlarmsTo works with ACTION_ALARM and send only alarm summary mails, not directly the alarm... 

Thank you, 

Nicolas. 




De: "Jon Siwek" <[email protected]> 
À: "krasinski" <[email protected]> 
Cc: "zeek" <[email protected]> 
Envoyé: Jeudi 14 Février 2019 23:40:07 
Objet: Re: [Zeek] Multiple email recipients 

On Thu, Feb 14, 2019 at 8:21 AM Nicolas KRASINSKI <[email protected]> wrote: 

> I tried also to put in my script 
> redef Notice::mail_dest = "[email protected]"; 
> but nothing work, 
> 
> How can I send ACTION_ALARM to the email of "mail_dest" ? 

If you are using BroControl, have you tried setting the MailTo option 
and/or MailAlarmsTo option in broctl.cfg ? As you saw from the 
documentation, those take precedence over values defined in scripts. 

- Jon

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.