Use a script as a dispatcher

Steve Grubb sgrubb at redhat.com
Thu Jan 2 14:32:00 UTC 2014


On Wed, 25 Dec 2013 19:33:04 +0800
Aaron Lewis <the.warl0ck.1989 at gmail.com> wrote:
> Can I use a perl script as a dispatcher? any examples

Sure. The requirements are outlined here:
http://people.redhat.com/sgrubb/audit/audit-rt-events.txt

However, the problem is that to make sense of the events, you probably
need to parse them and in many cases interpret them. I would suggest
using libauparse for this task. It has python bindings but none for
perl.

-Steve




More information about the Linux-audit mailing list