audisp-remote and audisp-prelude question

LC Bruzenak lenny at magitekltd.com
Tue Mar 24 17:30:28 UTC 2009


On Tue, 2009-03-24 at 17:55 +0100, Sebastien Tricaud wrote:
> On Tue, 2009-03-24 at 11:29 -0500, LC Bruzenak wrote:
> > 
> > However, logins on the remote machine which are sent to the collector
> > log do not make it into the prelude DB (at least prewikka doesn't show
> > them). I have no prewikka filters and I have the prewikka viewer set to
> > "1 day".
> 
> Hi, 
> 
> can you see events coming to prelude-manager when running:
> prelude-manager --debug
> 
> ?
> 
> Thanks,
> Sebastien.
> 
Sebastien,

Thanks for the reply. I do not see it getting into the prelude-manager.
I also did a local login so I could see one which worked and the alert
came through in that case.

LCB.

-- 
LC (Lenny) Bruzenak
lenny at magitekltd.com




More information about the Linux-audit mailing list