Changing Syslog facility

Fri Sep 19 15:25:56 UTC 2014

Apologies: 

O/S: Redhat 6.5 
Rsyslog: 5.8.10-8
AuditD:  2.2-2

On 19 Sep 2014, at 16:14, Marcus Inskip <marcus.inskip at icloud.com> wrote:

> Hi,
> 
> I’m trying to change the logging facility of audispd to local2 to send logs off to a remote server via Rsyslog without logging twice is this possible?    
> 
> Many thanks in advance,
> 
> Marcus
> 
> --
> Linux-audit mailing list
> Linux-audit at redhat.com
> https://www.redhat.com/mailman/listinfo/linux-audit

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20140919/a161ca6c/attachment.htm>