For /etc/audisp/plugins.d/syslog.conf, is "LOG_WARN" an accpeted arg, or does it need to be "LOG_WARNING"? Thanks! Leam -- Mind on a Mission <http://leamhall.blogspot.com/> -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://listman.redhat.com/archives/linux-audit/attachments/20161004/5f3bca15/attachment.htm>