audisp-prelude problems

[Loredan Stancu]

>
> On Wed, 2008-12-03 at 08:46 -0500, Steve Grubb wrote:
>>
>> > Another question is how I can use audisp-remote to send events
>> somewhere
>> > remote?
>>
>> Assuming you are using Fedora, to set this up on client machines, you
>> will need to install the audispd-plugins package. Then you need to set
>> the remote_server and port in the /etc/audisp/audisp-remote.conf
>> file.
>
> (trivial) also set:
> active = yes
> in /etc/audisp/plugins.d/au-remote.conf
>
> and see "TIPS" in audisp-remote(8) man page

I know how to activate the audisp-plugin, what I asked is how can I use it.

What I need is an example of an application which can stay on the remote
host, listen for incoming events send by audisp-remote plugin and store
these events in a regular file.


,
Loredan