Changing Syslog facility

Marcus Inskip marcus.inskip at icloud.com
Fri Sep 19 15:14:44 UTC 2014


Hi,

I’m trying to change the logging facility of audispd to local2 to send logs off to a remote server via Rsyslog without logging twice is this possible?    

Many thanks in advance,

Marcus




More information about the Linux-audit mailing list