Re: Creating a module and accessing an event in another script
Justin Azoff <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAPfnCujbUHMOXS0kd2i6hX2Y+2qyGbBxm48sSeSKhwejtd0VdQ@mail.gmail.com> |
On Tue, Jun 4, 2019 at 12:34 PM Merril Mathew <[email protected]> wrote: > Hi all, > > But the notice email action does not work though. It generates notice.log > but does not email. Any silly mistakes anyone can see? > Are you running against a pcap? emails are not sent when reading pcap files. You should still see ACTION_EMAIL in the actions field in the notice.log. -- Justin _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek