On Wednesday, January 06, 2016 09:29:54 PM Burn Alting wrote:
#2 - the 'lol' patch itself. Integrate the ausearch/aureport
'lol' code
into auparse() and adjust auparse() to deal with maintain an incore list
of incomplete events.
Quick question...there is this:
#define LOL_EVENTS 1
Couldn't we just assume that this is desired and get rid of all the #ifdefs?
(You don't need to re-send the patch.) Ideally I would like everyone running
the same code for support purposes.
-Steve