linux-audit-bounces@redhat.com wrote on 05/05/2005 04:06:56 PM:

> What does your stress.conf file look like?  I'm curious because on
> my system, I can lose audit records without much load at all, but
> I'm running the default auditd.conf.
>
> -- ljk

#
# This file controls the configuration of the audit daemon
#

log_file = /var/log/audit/audit.log
log_format = RAW
priority_boost = 3
flush = DATA
freq = 0
num_logs = 3
max_log_file = 4
max_log_file_action = ROTATE
space_left = 75
space_left_action = SYSLOG
admin_space_left = 50
admin_space_left_action = SUSPEND
disk_full_action = SUSPEND