audisp-prelude problems

Steve Grubb sgrubb at redhat.com
Wed Dec 3 16:33:24 UTC 2008


On Wednesday 03 December 2008 10:28:38 Loredan Stancu wrote:
> I know how to activate the audisp-plugin, what I asked is how can I use it.
>
> What I need is an example of an application which can stay on the remote
> host, listen for incoming events send by audisp-remote plugin and store
> these events in a regular file.

The audit daemon does that. The second part of the setup is to configure the 
log aggregator to receieve events from the client system.

-Steve




More information about the Linux-audit mailing list