User msg in Audit Viewer

[Brown, Curtis (cbrown31)]

I actually figured it out yesterday.  I just need to add name=value pairs as text in the user msg to be interpreted by Audit Viewer.

Thanks for the quick response.
________________________________
From: Miloslav Trmac [mitr at redhat.com]
Sent: Tuesday, February 26, 2013 2:29 AM
To: Brown, Curtis (cbrown31)
Cc: linux-audit at redhat.com
Subject: Re: User msg in Audit Viewer

Hello,
can you please attach a sample (possibly one-line) log file?

Thank you,
   Mirek

________________________________
I don’t know if this the correct forum for questions about the Audit Viewer but here goes.

I wrote a test app to write an audit user message (audit_log_user_message).  This is successful.

I’m trying to display the msg=”” portion of the audit record in Audit Viewer without success.

The msg portion doesn’t show up in the “Other Fields”  displayed by Audit Viewer but is present in the actual audit record.

Any help would be appreciated or please point me to a forum that can answer my question.


--
Linux-audit mailing list
Linux-audit at redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit