Re: Time field not readable
On Monday 03 November 2008 10:50:05 Kirkwood, David A. wrote:
I have had the audit running on multiple system for some time using
auditctl version 1.0.14 and everything is working just the way I want
it. I have been given a RHEL4u4 system ( which is what the others are)
and it havs auditctl version 1.2.1.
RHEL4 must use the audit tools from the 1.0.X series. There were many changes
that cause incompatibility with anything newer. Yes, install the 1.0.14 copy
and it should work better.
-Steve