What constitutes -f failure?

Tue Oct 29 19:51:53 UTC 2013

The -f flag is set to 0, 1, or 2 and specifies what to do on failure. Is
that "failure" any logging event? Or just logging events when the backlog
is higher than whatever the -b option sets it to?

Thanks!

Leam

-- 
Mind on a Mission <http://leamhall.blogspot.com/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20131029/c516387f/attachment.htm>