rotating audit logs

Bill Tangren bjt at aa.usno.navy.mil
Tue Feb 13 15:31:30 UTC 2007


I am required to rotate the audit logs daily on my RHEL boxes. As far as I can 
tell from the auditd.conf file, the auditd daemon only rotates the files when 
max_log_file reaches a certain size.

Is is possible to have the auditd daemon rotate the logs according to time, 
rather than size?

If auditd cannot do this, is it possible to turn off log rotating and let the 
logrotate daemon do it?

Thanks,

Bill Tangren




More information about the Linux-audit mailing list