You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have some questions about the elastalert2 and the security onion 2.80 I see that to send email alert I need to drop the custom rule on /opt/so/rules/elastalert/rules/custom/, that mean that I have to create a file for every rule that exits so I can receive email for those alerts , what difference would it make if I buy the pro license.
Guidelines
I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
-
Version
2.4.80
Installation Method
Security Onion ISO image
Description
installation
Installation Type
Distributed
Location
on-prem with Internet access
Hardware Specs
Exceeds minimum requirements
CPU
16
RAM
512
Storage for /
100
Storage for /nsm
1tb
Network Traffic Collection
span port
Network Traffic Speeds
Less than 1Gbps
Status
Yes, all services on all nodes are running OK
Salt Status
No, there are no failures
Logs
No, there are no additional clues
Detail
Hello,
I have some questions about the elastalert2 and the security onion 2.80 I see that to send email alert I need to drop the custom rule on /opt/so/rules/elastalert/rules/custom/, that mean that I have to create a file for every rule that exits so I can receive email for those alerts , what difference would it make if I buy the pro license.
Guidelines
Beta Was this translation helpful? Give feedback.
All reactions