[Spacewalk-list] Audit logging.
Stepan Rogov
rogov at post.km.ru
Wed Jul 18 10:35:04 UTC 2012
Well, I do the following:
Host named spacewalk.
1. I created a directory /var/satellite/systemlogs/spacewalk/audit/
2. Parse the audit log using the ausearch and aup and sent results to
the file /
var/satellite/systemlogs/spacewalk/audit/audit-1342555201-1342641599.parsed
ausearch -r -ts 07/18/2012 00:00:01 -te 07/18/2012 23:59:59 | /root/
aup> /var/satellite/systemlogs/spacewalk/audit/audit- `date-d
"07/18/2012 00:00:01" +% s `-` date-d "07/18/2012 23:59:59" +% s `. parsed
3. In the spacewalk moved on the Auditing tab, and nothing appeared.
> On Wed, 18 Jul 2012 12:27:29 +0400 Stepan Rogov
> <rogov at post.km.ru> wrote:
>
>> Hi All.
>>
>> I tried to configure audit logging for Spacewalk
>> https://fedorahosted.org/spacewalk/wiki/AuditReviewing.
>> But for some reason it does not work.
>> What is wrong?
> Hello,
> which part of the guide did not worked? What did you expected to
> see and what did you saw?
>
> Regards,
> Jan
>
>
>
More information about the Spacewalk-list
mailing list