[Bro] Connection summary and alarm summary emails frequency

Daniel Thayer dnthayer at illinois.edu
Tue Dec 10 09:24:13 PST 2013


If you set MailConnectionSummary=0 in broctl.cfg, then
you won't receive any connection summary emails, but the
connection summary reports will still be created (they are
archived along with the other bro log files), so you can
look at them when it is convenient for you.


On 12/10/2013 11:17 AM, Konrad Weglowski wrote:
> Thank you
>
> Konrad
>
>
>
> On Tue, Dec 10, 2013 at 12:06 PM, Robin Sommer <robin at icir.org
> <mailto:robin at icir.org>> wrote:
>
>
>
>     On Tue, Dec 10, 2013 at 11:25 -0500, Konrad Weglowski wrote:
>
>      > Do you know if there a way to keep the log rotation default (1hr) but
>      > modify the connection summary emails to be sent out every 24
>     hours for
>      > example?
>
>     No, sorry, the summaries are implemented as a log post-processor that
>     crunches conn.log as it gets rotated. That's why their intervals are
>     tied together.
>
>     Robin
>
>     --
>     Robin Sommer * Phone +1 (510) 722-6541
>     <tel:%2B1%20%28510%29%20722-6541> * robin at icir.org
>     <mailto:robin at icir.org>
>     ICSI/LBNL    * Fax +1 (510) 666-2956
>     <tel:%2B1%20%28510%29%20666-2956> * www.icir.org/robin
>     <http://www.icir.org/robin>
>
>




More information about the Bro mailing list