linux-audit-bounces(a)redhat.com wrote on 05/05/2005 04:06:56 PM:
What does your stress.conf file look like? I'm curious because
on
my system, I can lose audit records without much load at all, but
I'm running the default auditd.conf.
-- ljk
#
# This file controls the configuration of the audit daemon
#
log_file = /var/log/audit/audit.log
log_format = RAW
priority_boost = 3
flush = DATA
freq = 0
num_logs = 3
max_log_file = 4
max_log_file_action = ROTATE
space_left = 75
space_left_action = SYSLOG
admin_space_left = 50
admin_space_left_action = SUSPEND
disk_full_action = SUSPEND