* What does audisp/plugins.d/syslog.conf LOG_WARN not show?
@ 2018-03-22 19:08 leam hall
2018-05-03 20:39 ` Steve Grubb
0 siblings, 1 reply; 2+ messages in thread
From: leam hall @ 2018-03-22 19:08 UTC (permalink / raw)
To: linux-audit
(RHEL 6, default audit rpms)
We're trying to cut down on spurious logging but have some logging
mandated (STIG environment). If the syslog.conf file in
audisp/plugins.d/syslog.conf is set with "args = LOG_WARN", will the
events in audit.rules still be logged?
Thanks!
Leam
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: What does audisp/plugins.d/syslog.conf LOG_WARN not show?
2018-03-22 19:08 What does audisp/plugins.d/syslog.conf LOG_WARN not show? leam hall
@ 2018-05-03 20:39 ` Steve Grubb
0 siblings, 0 replies; 2+ messages in thread
From: Steve Grubb @ 2018-05-03 20:39 UTC (permalink / raw)
To: linux-audit
On Thursday, March 22, 2018 3:08:23 PM EDT leam hall wrote:
> (RHEL 6, default audit rpms)
>
> We're trying to cut down on spurious logging but have some logging
> mandated (STIG environment). If the syslog.conf file in
> audisp/plugins.d/syslog.conf is set with "args = LOG_WARN", will the
> events in audit.rules still be logged?
A little late...but I don't see any answer. It depends on what you have for
/etc/rsyslog.conf. Look for the line containing /var/log/messages and see
what you have. By default, it logs info messages and higher.
-Steve
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2018-05-03 20:39 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-03-22 19:08 What does audisp/plugins.d/syslog.conf LOG_WARN not show? leam hall
2018-05-03 20:39 ` Steve Grubb
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.