Auditd proctitle decoder required

Posted on

Hi Team,

We are forwarding auditd logs to our siem (QRadar), after the analysis of logs it was observed that proctitle value in logs is decoded in Hex and we want it in ASCII format.

Is there any way to convert it on the Linux side to any configuration or can we convert it on the SIEM side through any utility?

Responses