What does audisp/plugins.d/syslog.conf LOG_WARN not show?

leam hall leamhall at gmail.com
Thu Mar 22 19:08:23 UTC 2018


(RHEL 6, default audit rpms)

We're trying to cut down on spurious logging but have some logging
mandated (STIG environment). If the syslog.conf file in
audisp/plugins.d/syslog.conf is set with "args = LOG_WARN", will the
events in audit.rules still be logged?

Thanks!

Leam




More information about the Linux-audit mailing list