audisp-remote and audisp-prelude question

Sebastien Tricaud stricaud at inl.fr
Tue Mar 24 16:55:11 UTC 2009


On Tue, 2009-03-24 at 11:29 -0500, LC Bruzenak wrote:
> 
> However, logins on the remote machine which are sent to the collector
> log do not make it into the prelude DB (at least prewikka doesn't show
> them). I have no prewikka filters and I have the prewikka viewer set to
> "1 day".

Hi, 

can you see events coming to prelude-manager when running:
prelude-manager --debug

?

Thanks,
Sebastien.





More information about the Linux-audit mailing list