How to implement an audit log retention policy with compression based on time using rsyslog
Issue
- How to rotate audit logs on a per day basis?
- What is the supported method for daily audit log rotation and compression?
- I need to set up a X days retention policy for audit logs.
Environment
- Red Hat Enterprise Linux (All versions)
- auditd
- rsyslog
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
