First, I created a signature and wanted to reduce the frequency that it
fires. Does anyone have sample code for SIG_ALARM_PER_ORIG or some
other way to send out a single alarm per source IP?
Second, I configured the MailAlarmsTo setting, but the Alarms are still
going to the MailTo (bromessage@) address. I also tried setting
MailAlarms = True. What am I doing wrong?
First, I created a signature and wanted to reduce the frequency that it
fires. Does anyone have sample code for SIG_ALARM_PER_ORIG or some
other way to send out a single alarm per source IP?
It looks like you are supposed to do something like