[help] splunk and auditctl 1.5.2

Scott Ehrlich scott at MIT.EDU
Tue Apr 15 20:41:42 UTC 2008


I am trying splunk with auditctl 1.5.2 on CentOS 5 and cannot figure out how to 
get splunk to display the audit logs in ausearch -i mode (converting the 
encoded date/time stamp to human-readable).

Thanks for any insights.

Scott




More information about the redhat-list mailing list