> > On Wed, 2008-12-03 at 08:46 -0500, Steve Grubb wrote: >> >> > Another question is how I can use audisp-remote to send events >> somewhere >> > remote? >> >> Assuming you are using Fedora, to set this up on client machines, you >> will need to install the audispd-plugins package. Then you need to set >> the remote_server and port in the /etc/audisp/audisp-remote.conf >> file. > > (trivial) also set: > active = yes > in /etc/audisp/plugins.d/au-remote.conf > > and see "TIPS" in audisp-remote(8) man page
I know how to activate the audisp-plugin, what I asked is how can I use it. What I need is an example of an application which can stay on the remote host, listen for incoming events send by audisp-remote plugin and store these events in a regular file. , Loredan -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
