<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 18.07.2012 17:11, Joshua Roys wrote:
<blockquote cite="mid:5006B615.6030007@gtri.gatech.edu" type="cite">
<div class="moz-text-flowed" style="font-family: -moz-fixed;
font-size: 12px;" lang="x-unicode">On 07/18/2012 06:35 AM,
Stepan Rogov wrote:
<br>
<blockquote type="cite" style="color: #000000;">Well, I do the
following:
<br>
<br>
Host named spacewalk.
<br>
<br>
1. I created a directory <i class="moz-txt-slash"><span
class="moz-txt-tag">/</span>var/satellite/systemlogs/spacewalk/audit<span
class="moz-txt-tag">/</span></i>
<br>
<br>
2. Parse the audit log using the ausearch and aup and sent
results to
<br>
the file /
<br>
var/satellite/systemlogs/spacewalk/audit/audit-1342555201-1342641599.parsed
<br>
ausearch -r -ts 07/18/2012 00:00:01 -te 07/18/2012 23:59:59 |
<i class="moz-txt-slash"><span class="moz-txt-tag">/</span>root<span
class="moz-txt-tag">/</span></i>
<br>
aup> /var/satellite/systemlogs/spacewalk/audit/audit-
`date-d
<br>
"07/18/2012 00:00:01" +% s `-` date-d "07/18/2012 23:59:59" +%
s `. parsed
<br>
<br>
3. In the spacewalk moved on the Auditing tab, and nothing
appeared.
<br>
<br>
</blockquote>
<br>
Hello,
<br>
<br>
Please try setting the following in /etc/rhn/rhn.conf:
<br>
<br>
web.audit.logdir = /var/satellite/systemlogs
<br>
<br>
And then restart tomcat. Also, make sure that <i
class="moz-txt-slash"><span class="moz-txt-tag">/</span>var/satellite/systemlogs<span
class="moz-txt-tag">/</span></i>*<i class="moz-txt-slash"><span
class="moz-txt-tag">/</span>audit<span class="moz-txt-tag">/</span></i>*
are readable by tomcat all the way up from / (use `namei -m
/var/satellite/systemlogs/spacewalk/audit` for example).
<br>
<br>
Thanks,
<br>
<br>
Josh
<br>
<br>
</div>
</blockquote>
It's work!<br>
Thank you very much!<br>
It is necessary to correct the spacewalk wiki.<br>
<br>
</body>
</html>