RHEL8/9: What is logged by default in auditd?
Issue
- What is logged by default in
auditd
? - How many bytes are the average system expected to output per day without adding rules?
- Is there a way to select default events that are output without adding rules so that they are not logged?
Environment
- Red Hat Enterprise Linux (RHEL) 8 and 9
- auditd
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.