Discussion:
[ossec-list] The email a syscheck alert is different with alert.log
j***@gmail.com
2018-11-12 08:07:31 UTC
Permalink
Email alert doesn't show the changes, but the alert.log is work.


*Email*
OSSEC HIDS Notification.
2018 Nov 12 16:01:49
Received From: (nagios-server185) xxxxxxx->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Integrity checksum changed for: '/home/hehe.txt'
--END OF NOTIFICATION
*.../alerts/alert.log*

** Alert 1542009709.59473: mail - ossec,syscheck,
2018 Nov 12 16:01:49 (nagios-server185) xxxxxxx->syscheck
Rule: 550 (level 7) -> 'Integrity checksum changed.'
Integrity checksum changed for: '/home/hehe.txt'
*Permissions changed from 'rwxr--r--' to 'rwxr-xr-x'*
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+***@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
j***@gmail.com
2018-11-12 08:08:47 UTC
Permalink
Ossec server version " OSSEC HIDS v3.1.0".
Post by j***@gmail.com
Email alert doesn't show the changes, but the alert.log is work.
*Email*
OSSEC HIDS Notification.
2018 Nov 12 16:01:49
Received From: (nagios-server185) xxxxxxx->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Integrity checksum changed for: '/home/hehe.txt'
--END OF NOTIFICATION
*.../alerts/alert.log*
** Alert 1542009709.59473: mail - ossec,syscheck,
2018 Nov 12 16:01:49 (nagios-server185) xxxxxxx->syscheck
Rule: 550 (level 7) -> 'Integrity checksum changed.'
Integrity checksum changed for: '/home/hehe.txt'
*Permissions changed from 'rwxr--r--' to 'rwxr-xr-x'*
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+***@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Loading...