How To Incident Response

["lannoun@runbox.com" <lannoun@runbox.com>]

Hi,
I'm performing installation for a "secure" web app.

I'm starting with psad, and suricata.

Now I'd like to install Sguil or Snorby or any alternative for packet 
capturing. My problem is that I have to compile myself which we know is 
not the best solution for security.

Does any alternative exists?

Also, Which tool can mail me if there are any alerts?

Any other tools that I should consider?

Thanks for your help

Liam.