Re: How to monitor audit/audispd killed
"You can watch audispd, but I don't think that will help
anything.
my program totally depends on audispd to dispatch audit messages. I think
audispd need more robust mechanisms to monitor itself killed, otherwise
which inevitably leads to that audispd' plugins receive nothing but always
wait wait wait for event messages.
So are there some alternative ways to monitor audispd killed in audit
ver1.8 ?
Attachments:
- attachment.html (text/html — 492 bytes)