Re: [systemd-devel] Systemd Journald and audit logging causing journal issues

2017-12-01 Thread Lennart Poettering
On Fr, 01.12.17 12:19, Brad Zynda (bradley.v.zy...@nasa.gov) wrote: > > > On 12/01/2017 12:11 PM, Lennart Poettering wrote: > > On Fr, 01.12.17 09:05, Brad Zynda (bradley.v.zy...@nasa.gov) wrote: > > > >> Hey Lennart, > > > > Heya, > > > >> Just wanted to get your thoughts on this before we b

Re: [systemd-devel] Systemd Journald and audit logging causing journal issues

2017-12-01 Thread Brad Zynda
On 12/01/2017 12:31 PM, Lennart Poettering wrote: > On Fr, 01.12.17 12:19, Brad Zynda (bradley.v.zy...@nasa.gov) wrote: > >> >> >> On 12/01/2017 12:11 PM, Lennart Poettering wrote: >>> On Fr, 01.12.17 09:05, Brad Zynda (bradley.v.zy...@nasa.gov) wrote: >>> Hey Lennart, >>> >>> Heya, >>> >>>

Re: [systemd-devel] Systemd Journald and audit logging causing journal issues

2017-12-01 Thread Brad Zynda
On 12/01/2017 12:11 PM, Lennart Poettering wrote: > On Fr, 01.12.17 09:05, Brad Zynda (bradley.v.zy...@nasa.gov) wrote: > >> Hey Lennart, > > Heya, > >> Just wanted to get your thoughts on this before we break the link.. > > On what precisely? I am not sure what the original issue is, can you

Re: [systemd-devel] Systemd Journald and audit logging causing journal issues

2017-12-01 Thread Lennart Poettering
On Fr, 01.12.17 09:05, Brad Zynda (bradley.v.zy...@nasa.gov) wrote: > Hey Lennart, Heya, > Just wanted to get your thoughts on this before we break the link.. On what precisely? I am not sure what the original issue is, can you summarize this briefly here? > also can you provide proper directi

Re: [systemd-devel] Systemd Journald and audit logging causing journal issues

2017-12-01 Thread Brad Zynda
Hey Lennart, Just wanted to get your thoughts on this before we break the link.. also can you provide proper direction or a howto for breaking the link between auditd and journald? Thanks, Brad On Friday, December 1, 2017 8:17:58 AM EST Brad Zynda wrote: > Hey Steve, > > Just wanted to follow u

Re: [systemd-devel] Systemd Journald and audit logging causing journal issues

2017-10-02 Thread Brad Zynda
Thanks for pointing me in the right direction, as soon as I am moderator allowed for the audit mailing list I will present the question to them. Did you want to see the response from them? Thanks, Brad On 10/02/2017 11:40 AM, Lennart Poettering wrote: > On Mo, 02.10.17 11:25, Brad Zynda (bradley

Re: [systemd-devel] Systemd Journald and audit logging causing journal issues

2017-10-02 Thread Lennart Poettering
On Mo, 02.10.17 11:25, Brad Zynda (bradley.v.zy...@nasa.gov) wrote: > Sep 28 13:50:03 server systemd-journal[565]: Suppressed 73244 messages > from /system.slice/auditd.service The question is: why does auditd even log to the journal? > Now we are required to have full audit rules and does this

[systemd-devel] Systemd Journald and audit logging causing journal issues

2017-10-02 Thread Brad Zynda
Hey Everyone, Not sure if this is a bug so: systemctl status -l systemd-journald.service ● systemd-journald.service - Journal Service Loaded: loaded (/usr/lib/systemd/system/systemd-journald.service; static; vendor preset: disabled) Active: active (running) since Tue 2017-09-26 20:01:16 UTC