Re: Creating a module and accessing an event in another script
Jon Siwek <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAMzgZ0Jt1RQMC5HMWW_miNKEe5wKSWibsrtHC9=7vnqAMtLM2g@mail.gmail.com> |
On Tue, Jun 4, 2019 at 9:34 AM Merril Mathew <[email protected]> wrote: > But the notice email action does not work though. It generates notice.log but does not email. Any silly mistakes anyone can see? Do you also have "Notice::mail_dest" set to the email address that should receive them? Or if you're using ZeekControl / BroControl, you'd instead edit zeekctl.cfg/broctl.cfg to set the "MailTo" option. - Jon _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek