How to troubleshoot "direct" email alerts?

[thinkst]

How to troubleshoot "direct" email alerts?

Hi Brian,

You've got it right: the OC daemon isn't intended to send the emails (or even alerts) directly. It logs events to the Correlator which condenses multiple events into an single alert that it can send off. The default OC config file includes a directive log to the Correlator, which will be able to send off an email.

https://github.com/thinkst/opencanary/blob/master/opencanary/data/settings.json#L57

[7MinSec]

Ok thanks much, I can make email alerts work pretty well with inotify-tools so I think I'm good to go, just wanted to check on the "right" way to do this. Have a great day.

[kjacobsen]

Hi,

Just looking at OpenCanary, sorry to comment on a closed issue, but email alerts do seem to work from the OC daemon as @braimee was attempting to do.

"SMTP": {
                    "class": "logging.handlers.SMTPHandler",
                    "mailhost": ["smtp.sendgrid.net", 25],
                    "fromaddr": "[email protected]",
                    "toaddrs" : ["[email protected]"],
                    "subject" : "OpenCanary Alert",
                    "credentials" : ["username","password"]
               }