[Bro] Issue defining "Site::local_admins" variable

Espresso Beanies espressobeanies at gmail.com
Mon May 8 08:29:35 PDT 2017


Good morning,

I'm working on email separation between users and admins on my local Bro
instance and I'm not understanding the syntax for either the
"Site::get_emails" or the "Site::local_admins" variables for
ACTION_EMAIL_ADMIN. Since I avoid functions, I attempted to redefine the
following in my local.bro:

redef Site::local_admins += {
       table([xxx.xxx.xxx.xxx/16] = "emailaddress1 at something.com,
emailaddress2 at something.com");
};

Reference:
https://www.bro.org/sphinx/scripts/base/utils/site.bro.html#id-Site::local_admins

Bro doesn't like this and I'm unable to find previous examples for
guidance. Could someone point me in the right direction?

Thanks,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170508/d2e57001/attachment.html 


More information about the Bro mailing list