ausearch from cron

[Steve Grubb]

On Thursday 29 May 2008 11:37:27 Kurt S Harris wrote:
> When I run an ausearch from a cron in RedHat 5.1 I don't get any output,
> running the same command from the command line I get results.  Any ideas
> on what I'm missing?

You should upgrade to the audit package in RHEL5.2 where this has been fixed. 
You would then add the --input-logs commandline option to force it to use the 
logs instead of stdin.

-Steve