[Spacewalk-list] Audit logging.

Stepan Rogov rogov at post.km.ru
Wed Jul 18 10:35:04 UTC 2012


Well, I do the following:

Host named spacewalk.

1. I created a directory /var/satellite/systemlogs/spacewalk/audit/

2. Parse the audit log using the ausearch  and aup and sent results to 
the file / 
var/satellite/systemlogs/spacewalk/audit/audit-1342555201-1342641599.parsed
ausearch -r -ts 07/18/2012 00:00:01 -te 07/18/2012 23:59:59 | /root/ 
aup> /var/satellite/systemlogs/spacewalk/audit/audit- `date-d 
"07/18/2012 00:00:01" +% s `-` date-d "07/18/2012 23:59:59" +% s `. parsed

3. In the spacewalk moved on the Auditing tab, and nothing appeared.

> On Wed, 18 Jul 2012 12:27:29 +0400 Stepan Rogov
> <rogov at post.km.ru>  wrote:
>
>> Hi All.
>>
>> I tried to configure audit logging for Spacewalk
>> https://fedorahosted.org/spacewalk/wiki/AuditReviewing.
>> But for some reason it does not work.
>> What is wrong?
> Hello,
> which part of the guide did not worked? What did you expected to
> see and what did you saw?
>
> Regards,
> Jan
>
>
>




More information about the Spacewalk-list mailing list