Dispatcher buffer size

Steve Grubb sgrubb at redhat.com
Tue Nov 11 03:05:36 UTC 2008


On Monday 10 November 2008 16:08:59 Kevin Boyce wrote:
> Does anyone know if there is a way to adjust the buffer size between the
> auditd process and the dispatcher?

The buffer size is whatever the kernel gives pipes. The main adjustment you 
have is either the priority setting so that audit gets more runtime or 
adjusting the size of the internal audispd buffer.

-Steve




More information about the Linux-audit mailing list