How to set up automatic sending of messages triggered by the Suricata to the mail

Help
1

I cannot find if the Suricata can send alert messages to the mail. Is there such a possibility at all? How to do it?

2

Hello @ghostandreu,

Suricata does not have this functionality itself, you’d have to find other tools that can take Suricata alerts and convert them to emails. I’m not aware of any at this time, as I don’t think its really a common thing to do.

3

There are no ideas at all how to implement it? I watched SELKS, but it seems there is no such possibility there either.

4

Ideas, sure… There’s just nothing in Suricata to do this.

You could write a script to do it… Or looks at something like Wazzuh or other log file analyzers that might have email alerting built in.

5

Thanks a lot for the advice.