RE: [sentinix-list] Email Alert Notification?

Greg,
 Thats an interesting link but I should have been more specific in my request, I'm not sure if that would work for me as it relies on syslog files...

 I have three remote snort sensors logging to a central mysql database. I'd like to configure notifications based on the events in that databse (or does it have to be on each seperate machine?)

 This brings up some interesting questions for me:
-when the output plugin is directing snort output to a remote database will a "log watcher" like swatch still work?

-does snort log to the sys logs AND the remote database?

 This is my first attempt at this trick and the options are many it seems but some work better than others.

Any other ideas?

Thanks for the help,
Michael

-----Original Message-----
From: "Terkanian, Greg" <[email protected]>
Sent: Feb 4, 2004 2:59 PM
To: "M. Morgan" <[email protected]>, 
	The SENTINIX Mailing List <[email protected]>
Subject: RE: [sentinix-list] Email Alert Notification?

Check out the following link:
http://groups.google.com/groups?q=snort+email+notifications&hl=en&lr=lang_en&ie=UTF-8&oe=UTF-8&selm=a2noie%241m1l%241%40FreeBSD.csie.NCTU.edu.tw&rnum=5



-----Original Message-----
From: sentinix-bounces-y1CeFY8bYInMlQukkHbAVdBPR1lH4CV8@public.gmane.org
[mailto:sentinix-bounces-y1CeFY8bYInMlQukkHbAVdBPR1lH4CV8@public.gmane.org]On Behalf Of M. Morgan
Sent: Wednesday, February 04, 2004 1:50 PM
To: [email protected]
Subject: [sentinix-list] Email Alert Notification?


Hello list,
 Does anyone know of a tool that I can setup to send email notifications when I get certain alerts from my snort boxes?

thanks,
michael
_______________________________________________
SENTINIX mailing list
[email protected]
http://elevenprospect.com/mailman/listinfo/sentinix