Hi,

In one of the VM I find audit.rules defined under /etc/audit as well as /etc/audit/rules.d.

What is the significance as well as difference between the files found in 2 places.

Also please let me know what is the correct location where audit.rules need to be places.

Regards,

Vezhavendan K