[Bro-Dev] On the topic of MailTo/MailAlarmsTo...

[Vlad Grigorescu]

That sounds good to me. While I don't like overcomplicating things, I don't see any other way to do this without a 3rd option. I think the new names are clearer than the existing ones.

  --Vlad


On Dec 17, 2012, at 7:52 PM, Robin Sommer <robin at icir.org> wrote:

> So, yeah, that looks like we need third category, but maybe we one for
> the summaries. How about this:
> 
>     - Bro Notice::ACTION_EMAIL     -> MailTo
>     - Bro Notice::ACTION_ALARM     -> MailSummariesTo
>     - broctl summarize-connections -> MailSummariesTo
>     - broctl crash reports         -> MailAdminTo
>     - broctl cron output           -> MailAdminTo
> 
> MailSummariesTo and MailAdminTo would default to MailTo.