Interpreting fields in audisp-remote

Dmitry Krivitsky dmitrykrivitsky at hotmail.com
Wed Mar 30 01:07:12 UTC 2011


Hi,

I am trying to configure audisp-remote on several servers to send 
audit logs 
to a central server.
Is there any way to configure 
audisp-remote to resolve numerical user ids, 
system call numbers, etc., 
before sending them to the central server?
The central server may have a 
different list of users, different version of 
Linux, etc., so resolving them 
later on the central server may not work.

Thanks,
Dmitry Krivitsky

 		 	   		  




More information about the Linux-audit mailing list