audisp-remote man page on Oracle

Man page or keyword search:  
man Server   33470 pages
apropos Keyword Search (all sections)
Output format
Oracle logo
[printable version]

AUDISP-REMOTE:(8)	System Administration Utilities	     AUDISP-REMOTE:(8)

       audisp-remote - plugin for remote logging


       audisp-remote  is  a plugin for the audit event dispatcher daemon, aud‐
       ispd, that preforms remote logging to an aggregate logging server.

       If you are aggregating multiple machines, you should enable node infor‐
       mation in the audit event stream. You can do this in one of two places.
       If you want computer node names written to disk as well as sent in  the
       realtime	   event    stream,    edit    the   name_format   option   in
       /etc/audit/auditd.conf. If you only want the node names in the realtime
       event  stream,  then  edit  the	name_format option in /etc/audisp/aud‐
       ispd.conf. Do not enable both as it will put 2 node fields in the event

	      Causes  the  audisp-remote program to write the value of some of
	      its internal flags to syslog. The suspend flag tells whether  or
	      not  logging  has	 been  suspended.  The transport_ok flag tells
	      whether or not the connection to the remote server  is  healthy.
	      The queue_size tells how many records are enqueued to be sent to
	      the remote server.

	      Causes the audisp-remote program to resume logging  if  it  were
	      suspended due to an error.

       /etc/audisp/plugins.d/au-remote.conf, /etc/audit/auditd.conf, /etc/aud‐
       isp/audispd.conf, /etc/audisp/audisp-remote.conf

       audispd(8), auditd.conf(8), audispd.conf(8), audisp-remote.conf(5).

       Steve Grubb

Red Hat				   Apr 2011		     AUDISP-REMOTE:(8)

List of man pages available for Oracle

Copyright (c) for man pages and the logo by the respective OS vendor.

For those who want to learn more, the polarhome community provides shell access and support.

[legal] [privacy] [GNU] [policy] [cookies] [netiquette] [sponsors] [FAQ]
Polarhome, production since 1999.
Member of Polarhome portal.
Based on Fawad Halim's script.
Vote for polarhome
Free Shell Accounts :: the biggest list on the net