How to monitor audit/audispd killed

Matthew Chao mathewchao at gmail.com
Tue Jan 5 10:08:54 UTC 2016


>"You can watch audispd, but I don't think that will help anything.

my program totally depends on audispd to dispatch audit messages. I think
audispd need more robust mechanisms to monitor itself killed, otherwise
which inevitably leads to that audispd' plugins receive nothing but always
wait wait wait for event messages.

So are there some alternative ways to monitor audispd killed in audit
ver1.8 ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20160105/b74c3c51/attachment.htm>


More information about the Linux-audit mailing list