[Bro-Dev] On the topic of MailTo/MailAlarmsTo...

Vlad Grigorescu vladg at cmu.edu
Sun Dec 9 07:05:17 PST 2012


Similar to what Tyler was doing in #841, we're currently sending e-mails to MailTo into a ticket system. Crash reports are also being sent there, which doesn't really make sense. 

I don't want to overcomplicate things, but I'm wondering if it makes sense to add a third mail option, for system errors (crash reports, MinDiskSpace, etc.). We have an Incident Response team, who are in charge of handling the notices, and an engineering team, which actually updates the Bro config, and does any sysadmin work, so for us it'd be really useful to have that split.

Thoughts? Does this seem like a reasonable change?

  --Vlad


More information about the bro-dev mailing list