Local and remote copies of audit.log?
Reviewing the man pages of auditd (I'm using audit 1.5.2) on CentOS 5, it
doesn't seem obvious that I can log events locally AND send a copy to a
remote log host. Am I misreading it?
redhat-list mailing list