Stack report plugins with idmef-criteria

Sérgio Alves <[email protected]> Mon, 14 Jun 2010 10:37:28 +0100
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <[email protected]>
Hy there prelude users, do you know if i can do this in the report plugin of prelude-manager?

[smtp=test_high]
sender = prelude_high@localhost
recipients = high@localhost
smtp-server = localhost
 
[idmef-criteria]
rule = alert.assessment.impact.severity == 'high'
hook = smtp[test_high]
 
[smtp=test_low]
sender = prelude_low@localhost
recipients = low@localhost
smtp-server = localhost
 
[idmef-criteria]
rule = alert.assessment.impact.severity == 'low'
hook = smtp[test_low]
 
When i run with the two criterias prelude send me all the alerts for all
e-mail accounts.
Is there a way to make this work?


Regards,
Sérgio

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-user