What audit rules causes so much audit events ?
Issue
- Unneeded Audit events logs
- We have trouble with the rollout of the new Linux audit “auditxl”. It seems, that there is too much logging done.Could you please help us to find what rule causes that much audit events?
Environment
- Red Hat Enterprise Linux 6
- auditd
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
