LC Bruzenak wrote:
On Thu, 2008-08-14 at 19:00 -0400, John Dennis wrote:
DJ Delorie wrote:
The net result is to aggregate audit logs from many systems onto one
central audit server. Remote audit messages have the new "node=" tag
on them so you know where they came from.
The field name was "host", is the "node=" a typo or did the field name
change?
Mine say "node=".
The "host" field was added to audit records almost a year ago, although
if memory serves me correctly you have to enable it as a configuration
option. Is the node field redundant with host or did node supercede host?
--
John Dennis <[EMAIL PROTECTED]>
--
Linux-audit mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/linux-audit