audit record content

[John Calcote]

As far as I can tell, this forum has focused mainly on transport, performance, security and integrity issues. Indeed, these are all critical issues relative to audit, but is not audit record content just as important? If we spend all of our time managing the low-level transport issues, what does it avail us if only garbage is audited?

I've been working at the content level in an effort to standardize the record format. I've begun with the Open Group's XDAS standard as a baseline. The project is on sourceforge and it's called OpenXDAS. Back-end loggers are pluggable, and LAF is already supported on providing platforms.

Will some of you folks kindly take a few minutes of your time to look at the project and tell me what you think? I really want to make some traction here, and I think your good opinions are worth a lot. I'm open to suggestion, and would love to get some feedback.

http://openxdas.sourceforge.net 
http://www.sourceforge.net/projects/openxdas 

Thanks,
John

-----
John Calcote (jcalcote at novell.com)
Sr. Software Engineeer
Novell, Inc.

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: John Calcote.vcf
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20061108/f34dc0cd/attachment.ksh>