[RFC] New ausearch output option & audit viewing in Spacewalk

Miloslav Trmac mitr at redhat.com
Mon Jun 8 17:35:55 UTC 2009


Hello,
----- "Joshua Roys" <joshua.roys at gtri.gatech.edu> wrote:
> As part of developing an audit viewing "plugin"[1] to Spacewalk[2], I 
> wrote a small program to use libauparse to output (easily) 
> machine-parsable audit logs.  I think this functionality would be nice 
> to have in ausearch, and as such, wrote a patch for it.
If all you want is machine-readable name=value pairs, auparse provides a C/Python interface.  It's not 100% the same as the ausearch output, though.
    Mirek




More information about the Linux-audit mailing list