Trying to understand audisp-remote network behavior

Steve Grubb sgrubb at redhat.com
Tue Jul 12 16:32:45 UTC 2022


Hello,

On Monday, July 11, 2022 10:14:40 PM EDT Ken Hornstein wrote:
> >It is advisable to use the heartbeat option. This way each end can detect
> >the other "disappeared" for some reason.
> 
> Well, the default configuration is that heartbeats are turned off, so
> the general impression I would take away from that is you should only
> turn on heartbeats if you have some unusual requirement.

This has to be coordinated between the client and server as many of these 
setting need to be. I can add some discussion to the man page that this is 
recommended.

-Steve




More information about the Linux-audit mailing list