LC Bruzenak wrote:
On Thu, 2008-08-14 at 19:00 -0400, John Dennis wrote:
DJ Delorie wrote:
The net result is to aggregate audit logs from many systems onto one
central audit server.  Remote audit messages have the new "node=" tag
on them so you know where they came from.
The field name was "host", is the "node=" a typo or did the field name change?


Mine say "node=".

The "host" field was added to audit records almost a year ago, although if memory serves me correctly you have to enable it as a configuration option. Is the node field redundant with host or did node supercede host?

--
John Dennis <[EMAIL PROTECTED]>

--
Linux-audit mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/linux-audit

Reply via email to