[RFC] New ausearch output option & audit viewing in Spacewalk
Miloslav Trmac
mitr at redhat.com
Mon Jun 8 17:35:55 UTC 2009
Hello,
----- "Joshua Roys" <joshua.roys at gtri.gatech.edu> wrote:
> As part of developing an audit viewing "plugin"[1] to Spacewalk[2], I
> wrote a small program to use libauparse to output (easily)
> machine-parsable audit logs. I think this functionality would be nice
> to have in ausearch, and as such, wrote a patch for it.
If all you want is machine-readable name=value pairs, auparse provides a C/Python interface. It's not 100% the same as the ausearch output, though.
Mirek
More information about the Linux-audit
mailing list