Audit Logs and EventLog Analyzer

[Dan Gruhn]

I'm currently using AdventNet's EventLog Analyzer for auditing of a 
secure Windows machine and thought it would be nice to use for a secure 
RHEL 5.2 cluster as well since people would only need to use one 
interface.  It seems to do well with the syslog entries, but I don't see 
anything about getting the auditd/ audit.log entries into it.  Can 
anyone point me to some information on how to do this or should I give 
up on this and go the Prewikka route?

Thanks,

Dan