Send emails from BRO Notices

Hi All,

I can’t get the BRO Notices emails to work in my current Security Onion 12.04 set up. I have the below line in /opt/bro/share/bro/site/local.bro UNcommented.

# redef Notice::policy += { [$action = Notice::ACTION_ALARM, $priority = 0] };

I am getting the BRO connection summary emails regularly after I changed the /opt/bro/etc/broctl.cfg.

Is there anything I am missing in my configuration?

Thanks in advance.

Del Tiongco