[Zeek] Multiple email recipients

[Jon Siwek]

On Thu, Feb 14, 2019 at 8:21 AM Nicolas KRASINSKI <krasinski at cines.fr> wrote:

> I tried also to put in my script
> redef Notice::mail_dest = "user at domain.com";
> but nothing work,
>
> How can I send ACTION_ALARM to the email of "mail_dest" ?

If you are using BroControl, have you tried setting the MailTo option
and/or MailAlarmsTo option in broctl.cfg ?  As you saw from the
documentation, those take precedence over values defined in scripts.

- Jon