On Monday 10 November 2008 16:08:59 Kevin Boyce wrote:
Does anyone know if there is a way to adjust the buffer size between
the
auditd process and the dispatcher?
The buffer size is whatever the kernel gives pipes. The main adjustment you
have is either the priority setting so that audit gets more runtime or
adjusting the size of the internal audispd buffer.
-Steve