Re: Audit Parsing Library Requirements

Monday, 13 March 2006


...
 > Since this is introducing the notion of multiple machines 
 potentially sharing 
 > the same log...would it be more clear to change the name to prevent 
 > confusion? 
 > 
 > Its currently host, but would could make it: server, node, machine,  etc.
...
 
 OK, I have a question because I think there are two issues here:
 1) Steve has a function, called auparse_get_host, which is paralleled
 by other things like get_serial, which implies that every event has an
 associated host
 2) This particular event has a host field, I do not think that
 auparse_get_host(0 and auparse_get_filed(au,"host") are the same 
Thanks Mike.  I see my confusion now.
Since some of the records do have a field 'hostname', I favor changing
auparse_get_host to auparse_get_machine or auparse_get_node.
-debbie

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004