Audit rotate
Steve Grubb
sgrubb at redhat.com
Thu Jan 8 16:46:43 UTC 2015
On Thursday, January 08, 2015 11:39:17 AM David Flatley wrote:
> Trying to setup Auditing on a Suse Server 11 SP3 with audit version
> 1.8.0.3. Apparently "audit rotate" is not available on this version of
> auditd? I know from past posts by Steve Grubb that logrotate does not
> work well rotating /var/log/audit/audit.log. So any thoughts on doing audit
> logrotations?
"service auditd rotate" is simply a convenience for sending SIGUSR1 to auditd.
That is all you need to do to force rotation of the logs.
-Steve
More information about the Linux-audit
mailing list