[Spacewalk-list] Audit logging.

Stepan Rogov rogov at post.km.ru
Wed Jul 18 13:00:58 UTC 2012


Nothing in the logs.
Perhaps need to enable audit log support somewhere in the settings?

> Hello,
> just guessing - try:
>
> # tail -f /var/log/audit/audit.log /var/log/tomcat?/catalina.out /var/log/httpd/error_log
>
> while reloading Admin section in WebUI.
>
> If there is some problem, it could appear in one of these logs.
>
> If it just do not work, you should probably file a bugzilla if
> nobody else here can help.
>
> Regards,
> Jan
>
>
>
> On Wed, 18 Jul 2012 14:35:04 +0400 Stepan Rogov
> <rogov at post.km.ru>  wrote:
>
>> Well, I do the following:
>>
>> Host named spacewalk.
>>
>> 1. I created a
>> directory /var/satellite/systemlogs/spacewalk/audit/
>>
>> 2. Parse the audit log using the ausearch  and aup and sent
>> results to the file /
>> var/satellite/systemlogs/spacewalk/audit/audit-1342555201-1342641599.parsed
>> ausearch -r -ts 07/18/2012 00:00:01 -te 07/18/2012 23:59:59
>> | /root/
>> aup>  /var/satellite/systemlogs/spacewalk/audit/audit- `date-d
>> "07/18/2012 00:00:01" +% s `-` date-d "07/18/2012 23:59:59" +%
>> s `. parsed
>>
>> 3. In the spacewalk moved on the Auditing tab, and nothing
>> appeared.
>>
>>> On Wed, 18 Jul 2012 12:27:29 +0400 Stepan Rogov
>>> <rogov at post.km.ru>   wrote:
>>>
>>>> Hi All.
>>>>
>>>> I tried to configure audit logging for Spacewalk
>>>> https://fedorahosted.org/spacewalk/wiki/AuditReviewing.
>>>> But for some reason it does not work.
>>>> What is wrong?
>>> Hello,
>>> which part of the guide did not worked? What did you
>>> expected to see and what did you saw?
>>>
>>> Regards,
>>> Jan
>>>
>>>
>>>
>




More information about the Spacewalk-list mailing list