[syslog-ng] Send auditd info to syslog-ng in RHEL

[Evan Rempel]

just turn off auditd and the messages start popping into syslog.

Evan.


Phusion wrote:
> Does anyone know a way to send auditd information to syslog-ng? I have
> a server running RHEL5 and by default it stores the info to a log file
> defined in the config file. By default it points to
> /var/log/audit/audit.log. Let me know if you have experience with this
> or ideas of things to try.
> 
> Phusion
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>