[Bro] Send emails from BRO Notices

Del T deltiongco at gmail.com
Wed Nov 13 12:29:20 PST 2013

Hi All,

I can't get the BRO Notices emails to work in my current Security Onion
12.04 set up. I have the below line in /opt/bro/share/bro/site/local.bro

# redef Notice::policy += { [$action = Notice::ACTION_ALARM, $priority = 0] };

 I am getting the BRO connection summary emails regularly after I changed
the /opt/bro/etc/broctl.cfg.

Is there anything I am missing in my configuration?

Thanks in advance.

Del Tiongco
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131113/95bebc0f/attachment.html 

More information about the Bro mailing list