[Snort-users] Email alerts
erek at ...950...
Tue Apr 8 06:58:09 EDT 2003
On Mon, 7 Apr 2003, Matt Kettler wrote:
> Read the fine FAQ for the basic suggestion:
> In a bit more detail, swatch/logcheck are tools which search logs for
> various substrings and run external scripts when they find those strings.
> You should be able to use the priority field as a part of your search
> Swatch has a homepage here:
And to add to what Matt said:
Have a look at this . It's a swatch.conf file that Jason Haar put
together as an example of 'emailing alerts'.
"When things get weird, the weird turn pro." H.S. Thompson
More information about the Snort-users