[Zeek] Creating a module and accessing an event in another script
Justin Azoff
justin at corelight.com
Tue Jun 4 09:37:26 PDT 2019
On Tue, Jun 4, 2019 at 12:34 PM Merril Mathew <merril.mathew at baby2body.com>
wrote:
> Hi all,
>
> But the notice email action does not work though. It generates notice.log
> but does not email. Any silly mistakes anyone can see?
>
Are you running against a pcap? emails are not sent when reading pcap
files. You should still see ACTION_EMAIL in the actions field in the
notice.log.
--
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190604/2798f30b/attachment.html
More information about the Zeek
mailing list