Reviewing the man pages of auditd (I'm using audit 1.5.2) on CentOS 5, it doesn't seem obvious that I can log events locally AND send a copy to a remote log host. Am I misreading it? Thanks. Scott