[Zeek] Creating a module and accessing an event in another script

Justin Azoff justin at corelight.com
Tue Jun 4 09:37:26 PDT 2019


On Tue, Jun 4, 2019 at 12:34 PM Merril Mathew <merril.mathew at baby2body.com>
wrote:

> Hi all,
>
> But the notice email action does not work though. It generates notice.log
> but does not email. Any silly mistakes anyone can see?
>

Are you running against a pcap?  emails are not sent when reading pcap
files.  You should still  see ACTION_EMAIL in the actions field in the
notice.log.

-- 
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190604/2798f30b/attachment.html 


More information about the Zeek mailing list