auditd without a logfile? - Linux-audit - Linux-Audit List Archives

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

auditd without a logfile?

[PATCH] audit: Add cmdline to...

Is unlink the audit equivalent of...

Peter Moody

Sunday, 27 October 2013 Sun, 27 Oct '13

11:10 p.m.

Is there anyway to run auditd without any local logging? I'm trying to see if I can get auditd to completely avoid logging locally, using only a custom dispatcher to log events remotely but auditd refuses to start if I set log_file = '/dev/null'. Cheers, peter

Reply

Show replies by date

Steve Grubb

Monday, 28 October Mon, 28 Oct

7:31 a.m.

On Sunday, October 27, 2013 09:10:50 PM Peter Moody wrote:

Is there anyway to run auditd without any local logging? I'm trying to see if I can get auditd to completely avoid logging locally, using only a custom dispatcher to log events remotely but auditd refuses to start if I set log_file = '/dev/null'.

log_format = NOLOG -Steve

Reply

4021

days inactive

4021

days old

linux-audit@lists.linux-audit.osci.io

Manage subscription

1 comments

2 participants

tags (0)

participants (2)

Peter Moody
Steve Grubb