log rendering in real time in audit-viewer

Xeniya Muratova muratova at itsirius.su
Wed Mar 4 13:42:34 UTC 2015


Hello Miloslav, and all the guys!

We use audit-viewer for events monitoring.
Unfortunately, if some log is rather big it takes to much time for audit-viewer to parse and render it.
Besides, we need to render log updates in real time, i.e. when a new line appears in a log, it should appear in a viewer too.
Can you suggest the better way to extend audit-viewer to meet these requirements?
Thanks in advance.

Kseniya Muratova,




More information about the Linux-audit mailing list