[Bro-Dev] #814: Fix MailAlarmsTo

Bro Tracker bro at tracker.bro-ids.org
Wed Aug 1 08:29:23 PDT 2012

#814: Fix MailAlarmsTo
  Reporter:  Tyler.Schoenke  |      Owner:
      Type:  Problem         |     Status:  new
  Priority:  Normal          |  Milestone:  Bro2.1
 Component:  BroControl      |    Version:  git/master
Resolution:                  |   Keywords:  MailAlarmsTo

Comment (by dnthayer):

 Not sure what the expected behavior should be:  currently, notices with
 action ACTION_EMAIL are
 emailed and notices with action ACTION_ALARM are not (but you can apply
 both actions to
 a single notice if you want).  During each log rotation, two summary
 emails are sent:
 one that lists all notices with action ACTION_ALARM that occurred since
 the last log rotation,
 and the other is the connection summary report.

 So, the "MailAlarmsTo" would specify the email address for the alarm
 summary email, and
 the "MailTo" would specify the email address for notices with action
 ACTION_EMAIL (and for
 the connection summary report that is sent each time log rotation occurs),

Ticket URL: <http://tracker.bro-ids.org/bro/ticket/814#comment:3>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker

More information about the bro-dev mailing list