crowdsec/plugins/notifications/email/email.yaml

36 lines
1.4 KiB
YAML
Raw Normal View History

# Don't change this
type: email
name: email_default # this must match with the registered plugin in the profile
log_level: info # Options include: trace, debug, info, warn, error, off
format: | # This template receives list of models.Alert objects
{{range . -}}
{{$alert := . -}}
{{range .Decisions -}}
<a href=https://www.whois.com/whois/{{.Value}}>{{.Value}}</a> will get <b>{{.Type}}</b> for next <b>{{.Duration}}</b> for triggering <b>{{.Scenario}}</b> on machine <b>{{$alert.MachineID}}</b>. <a href=https://www.shodan.io/host/{{.Value}}>Shodan</a>
{{end -}}
{{end -}}
smtp_host: # eg value smtp.gmail.com
smtp_username: #Replace this with your actual username
smtp_password: #Replace this with your actual password
smtp_port: # Common values are any of [25, 465, 587, 2525]
auth_type: # Valid choices are either of "none", "crammd5", "login", "plain"
sender_email: # eg: foo@gmail.com
email_subject: CrowdSec Notification
receiver_emails:
# - email1@gmail.com
# - email2@gmail.com
encryption_type: ssltls # eg valid choices are either "ssltls" or "none"
# group_wait: # duration to wait collecting alerts before sending to this plugin, eg "30s"
# group_threshold: # if alerts exceed this, then the plugin will be sent the message. eg "10"
# max_retry: # number of tries to attempt to send message to plugins in case of error.
timeout: 20s # duration to wait for response from plugin before considering this attempt a failure. eg "10s"