[Bro] Send emails from BRO Notices

[Del T]

Hi All,

I can't get the BRO Notices emails to work in my current Security Onion
12.04 set up. I have the below line in /opt/bro/share/bro/site/local.bro
UNcommented.

# redef Notice::policy += { [$action = Notice::ACTION_ALARM, $priority = 0] };



 I am getting the BRO connection summary emails regularly after I changed
the /opt/bro/etc/broctl.cfg.

Is there anything I am missing in my configuration?

Thanks in advance.

Del Tiongco
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131113/95bebc0f/attachment.html