Local and remote copies of audit.log?



Reviewing the man pages of auditd (I'm using audit 1.5.2) on CentOS 5, it doesn't seem obvious that I can log events locally AND send a copy to a remote log host. Am I misreading it?

Thanks.

Scott

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list



Relevant Pages

  • Re: For what reason would IRS send certified mail?
    ... I got one of those "we are reviewing your 2004 return" ... decided that I owed them some unpayable amount and I had two choices, ... My favorite story along those lines was the "mail audit" my live-in ... mortgage interest deduction. ...
    (rec.sport.football.college)
  • Re: Problems with auditd
    ... been reading online posts about auditd and auditing (as well as the man ... If I run audit -s, ... You would think, if the system is going to install the daemon, it would have that option in the GENERIC kernel. ...
    (freebsd-questions)
  • Problems with auditd
    ... I upgraded my system from 6.0 RELEASE to 6.2 RELEASE by cvsupping the files and then running buildkernel/buildworld as usual. ... been reading online posts about auditd and auditing but I haven't found what the problem is. ... If I run audit -s, ... I have since cvsupped a second time and rebuilt world, but I have not rebuilt the kernel. ...
    (freebsd-questions)
  • Re: Whats wrong with this trigger
    ... After reviewing what the previous datbase developer did with the audit ... tables I realized that there was no need for an identity field in the audit ...
    (microsoft.public.access.adp.sqlserver)
  • Re: Problems with auditd
    ... files and then running buildkernel/buildworld as usual. ... been reading online posts about auditd and auditing (as well as the man ... If I run audit -s, ...
    (freebsd-questions)