OSSEC Email-notification: multiple email-addresses/recipients possible?

[Verlag Neue Stadt]

Hello,

is it possible to define serveral email-addresses/recipients (were
email-notifications are beeing sent) ?

Thank's a lot for your feedback!

John

[tswmme...@gmail.com]

Yes it is.

Try adding something like this to your ossec.conf file.

<email_alerts>
<email_to>per...@mydomain.com,per...@mydomain.com</email_to>
<rule_id>100002</rule_id>
<do_not_delay />
<do_not_group />
</email_alerts>

[Daniel Cid]

Hi,

Actually, this format will not work. You need to specify each email
address on its
own "email_to" tag:

<email_to>per...@mydomain.com</email_to>
<email_to>per...@mydomain.com</email_to>
<email_to>xxx</email_to>

Hope it helps.

--
Daniel B. Cid
dcid ( at ) ossec.net

[Ioan Corneliu SALISTEANU]

In this case the email will contain multiple To: headers which will cause problems with AV and AS systems. Right?