[help] splunk and auditctl 1.5.2

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I am trying splunk with auditctl 1.5.2 on CentOS 5 and cannot figure out how to get splunk to display the audit logs in ausearch -i mode (converting the encoded date/time stamp to human-readable).

Thanks for any insights.

Scott


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux