Re: Creating a module and accessing an event in another script
Merril Mathew <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <[email protected]> |
Hi Jon, Yes I have MailTo option set to my email address in zeekcontrol. Kind regards, Merril. > On 4 Jun 2019, at 17:43, Jon Siwek <[email protected]> wrote: > > On Tue, Jun 4, 2019 at 9:34 AM Merril Mathew > <[email protected]> wrote: > >> But the notice email action does not work though. It generates notice.log but does not email. Any silly mistakes anyone can see? > > Do you also have "Notice::mail_dest" set to the email address that > should receive them? Or if you're using ZeekControl / BroControl, > you'd instead edit zeekctl.cfg/broctl.cfg to set the "MailTo" option. > > - Jon _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek