I have a CS-MARS and need to send alerts when specific events occurs. Using the action field in the inspection rules, this is achieved without problems.
But, I need configure alerts by a most general way, like for events of a specific severity or rule group, and not rule by rule. How can I configure CS-MARS by this way?
I'm waiting for a reply.