Hi Kris, > These are the files for the stress test, cleaned up to remove LTP > dependencies. What does your stress.conf file look like? I'm curious because on my system, I can lose audit records without much load at all, but I'm running the default auditd.conf. -- ljk