Why rule.id:92657 can't send alert mail

85 views
Skip to first unread message

James Cao

unread,
Oct 12, 2023, 10:25:03 PM10/12/23
to Wazuh | Mailing List
螢幕擷取畫面 2023-10-13 102117.png

I already set mail alert for rule.id:92657, but I can't receive any mail in my mailbox 

螢幕擷取畫面 2023-10-13 102351.png螢幕擷取畫面 2023-10-13 102433.png

Harshal Paliwal

unread,
Oct 13, 2023, 1:22:36 AM10/13/23
to Wazuh | Mailing List
Hi Team,
Thanks for using the Wazuh.

Can you please let me know if are you getting the email notification for other alerts?
Also, can you edit the rule and add the <options>alert_by_email</options> below <description>?

Waiting for your response soon.

Regards,

James Cao

unread,
Oct 13, 2023, 6:07:24 AM10/13/23
to Wazuh | Mailing List
Hi

Other rule id mail alert i can receive but only this rule id i can't
螢幕擷取畫面 2023-10-13 180449.png螢幕擷取畫面 2023-10-13 180517.png
螢幕擷取畫面 2023-10-13 180657.png
But rule id 92657 I can't receive mail
螢幕擷取畫面 2023-10-13 180551.png

Harshal Paliwal 在 2023年10月13日 星期五下午1:22:36 [UTC+8] 的信中寫道:

Harshal Paliwal

unread,
Oct 13, 2023, 6:41:09 AM10/13/23
to Wazuh | Mailing List
Hi,
Have you added the below <options>alert_by_email</options> and tested it?

James Cao

unread,
Oct 16, 2023, 1:41:04 AM10/16/23
to Wazuh | Mailing List
yes I add <options>alert_by_email</options>  but not see any 92657 alert mail
Harshal Paliwal 在 2023年10月13日 星期五下午6:41:09 [UTC+8] 的信中寫道:

Harshal Paliwal

unread,
Oct 17, 2023, 1:55:24 AM10/17/23
to Wazuh | Mailing List
Hi James,

Did you restart the Wazuh manager after adding this?

Regards

James Cao

unread,
Oct 31, 2023, 4:52:06 AM10/31/23
to Wazuh | Mailing List
Yes I restart agent after i config file

Harshal Paliwal 在 2023年10月17日 星期二下午1:55:24 [UTC+8] 的信中寫道:
Reply all
Reply to author
Forward
0 new messages