Interpreting fields in audisp-remote
Dmitry Krivitsky
dmitrykrivitsky at hotmail.com
Wed Mar 30 01:07:12 UTC 2011
Hi,
I am trying to configure audisp-remote on several servers to send
audit logs
to a central server.
Is there any way to configure
audisp-remote to resolve numerical user ids,
system call numbers, etc.,
before sending them to the central server?
The central server may have a
different list of users, different version of
Linux, etc., so resolving them
later on the central server may not work.
Thanks,
Dmitry Krivitsky
More information about the Linux-audit
mailing list