Re: Multiple email recipients
Nicolas KRASINSKI <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <[email protected]> |
Thanks, It works fine with MailAlarmsTo in broctl.cfg. But MailAlarmsTo works with ACTION_ALARM and send only alarm summary mails, not directly the alarm... Thank you, Nicolas. De: "Jon Siwek" <[email protected]> À: "krasinski" <[email protected]> Cc: "zeek" <[email protected]> Envoyé: Jeudi 14 Février 2019 23:40:07 Objet: Re: [Zeek] Multiple email recipients On Thu, Feb 14, 2019 at 8:21 AM Nicolas KRASINSKI <[email protected]> wrote: > I tried also to put in my script > redef Notice::mail_dest = "[email protected]"; > but nothing work, > > How can I send ACTION_ALARM to the email of "mail_dest" ? If you are using BroControl, have you tried setting the MailTo option and/or MailAlarmsTo option in broctl.cfg ? As you saw from the documentation, those take precedence over values defined in scripts. - Jon _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek