[Zeek] Creating a module and accessing an event in another script

Jon Siwek jsiwek at corelight.com
Tue Jun 4 09:43:43 PDT 2019


On Tue, Jun 4, 2019 at 9:34 AM Merril Mathew
<merril.mathew at baby2body.com> wrote:

> But the notice email action does not work though. It generates notice.log but does not email. Any silly mistakes anyone can see?

Do you also have "Notice::mail_dest" set to the email address that
should receive them?  Or if you're using ZeekControl / BroControl,
you'd instead edit zeekctl.cfg/broctl.cfg to set the "MailTo" option.

- Jon


More information about the Zeek mailing list