Hi,
Turning on all system calls in audit.rules, and transferring a tar file to the target system (CentOS 7, 4 cores), I found "auditd" consumes high CPU usage. Is it expected? BTW, after turning write-logs off, and add dispatcher, both "audispd" and "auditd" are consuming high CPU. Regards Hai
[email protected]
Description: Binary data
-- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
