# # This file controls the configuration of the audit remote # logging subsystem, audisp-remote. # ######################################################################## # Change Log: # Date: Author: Description: # _____________ _______________ ________________________________________ # 10/16/2010 J. Richard Change q_depth to 12288 to help minimize # dropped events. ######################################################################## remote_server = syslog.sciquest.com port = 60 #local_port = 13 transport = tcp mode = immediate #queue_depth = 200 queue_depth = 12288 format = managed network_retry_time = 1 max_tries_per_record = 3 max_time_per_record = 5 heartbeat_timeout = 0 network_failure_action = ignore disk_low_action = ignore disk_full_action = ignore disk_error_action = syslog remote_ending_action = reconnect generic_error_action = syslog generic_warning_action = syslog #enable_krb5 = no ##krb5_principal = #krb5_client_name = auditd ##krb5_key_file = /etc/audisp/audisp-remote.key