[Bro] Issue defining "Site::local_admins" variable
Espresso Beanies
espressobeanies at gmail.com
Mon May 8 08:29:35 PDT 2017
Good morning,
I'm working on email separation between users and admins on my local Bro
instance and I'm not understanding the syntax for either the
"Site::get_emails" or the "Site::local_admins" variables for
ACTION_EMAIL_ADMIN. Since I avoid functions, I attempted to redefine the
following in my local.bro:
redef Site::local_admins += {
table([xxx.xxx.xxx.xxx/16] = "emailaddress1 at something.com,
emailaddress2 at something.com");
};
Reference:
https://www.bro.org/sphinx/scripts/base/utils/site.bro.html#id-Site::local_admins
Bro doesn't like this and I'm unable to find previous examples for
guidance. Could someone point me in the right direction?
Thanks,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170508/d2e57001/attachment.html
More information about the Bro
mailing list