How to monitor audit/audispd killed
Matthew Chao
mathewchao at gmail.com
Tue Jan 5 10:08:54 UTC 2016
>"You can watch audispd, but I don't think that will help anything.
my program totally depends on audispd to dispatch audit messages. I think
audispd need more robust mechanisms to monitor itself killed, otherwise
which inevitably leads to that audispd' plugins receive nothing but always
wait wait wait for event messages.
So are there some alternative ways to monitor audispd killed in audit
ver1.8 ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20160105/b74c3c51/attachment.htm>
More information about the Linux-audit
mailing list