Hello, Steve!
The solution is verified! There is no problem.
Thank you so much!
Good luck!
20.06.2018 20:55, Steve Grubb пишет:
> On Thursday, April 12, 2018 2:13:39 AM EDT Levin Stanislav wrote:
>> Let's assume we have client's audit service and audit gatherer placed on
>>
Hello All!
I have a question.
Let's assume we have client's audit service and audit gatherer placed on
a remote host.
Using au-remote plugin client sends logs to remote.
Let's stop (do not start then) remote's audit service and restart
client's one.
After that overcome max_restarts limit
Hello, thank you for a quick answer.
04.10.2018 18:56, Steve Grubb пишет:
> Hello,
>
> On Thursday, October 4, 2018 10:14:17 AM EDT Levin Stanislav wrote:
>> I try to use auditd as a server to gather logs from remote clients.
>>
>> 1) My conditions:
>>
&g
Hello.
I try to use auditd as a server to gather logs from remote clients.
1) My conditions:
/rpm -q audit//
//audit-2.8.4/
/uname -r//
//4.9.124/
/ipv6 is disable/
2) Problem's symptom:
after every reboot of server machine i have
/from journalctl:/
/auditd[765]: Cannot create tcp
