[Zeek] Creating a module and accessing an event in another script

Merril Mathew merril.mathew at baby2body.com
Wed Jun 5 01:03:17 PDT 2019


Hi Jon,

Yes I have MailTo option set to my email address in zeekcontrol.

Kind regards,
Merril.

> On 4 Jun 2019, at 17:43, Jon Siwek <jsiwek at corelight.com> wrote:
> 
> On Tue, Jun 4, 2019 at 9:34 AM Merril Mathew
> <merril.mathew at baby2body.com> wrote:
> 
>> But the notice email action does not work though. It generates notice.log but does not email. Any silly mistakes anyone can see?
> 
> Do you also have "Notice::mail_dest" set to the email address that
> should receive them?  Or if you're using ZeekControl / BroControl,
> you'd instead edit zeekctl.cfg/broctl.cfg to set the "MailTo" option.
> 
> - Jon




More information about the Zeek mailing list