Re: Auditd cause high CPU and high Load

2016-12-01 Thread Edward Bailey
We ran into exactly the same issue with the update to 6.8. Using flush and setting freq to 300 fixed the issue we were experiencing. Ed On Thu, Dec 1, 2016 at 9:00 AM Steve Grubb wrote: > Hello, > > On Thursday, December 1, 2016 11:59:47 AM EST Minh Tien Nguyen wrote: > > My name is Nguyen Minh

TTY logging using auditd feedback requested

2014-01-07 Thread Edward Bailey
Greetings I am looking into using auditd to capture tty logging for all users and I am having some trouble. Capturing keystrokes is a requirement from our security team that I am not wild about, but for various reasons it is what is. We already push all the log data into Splunk so I am not that co