HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

How can I send audit logging to syslog.log?

 

How can I send audit logging to syslog.log?

I have auditing setup on a 11.23 server and it send logs to a file it is working fine but I would now like to send audit logging to syslog.log. I believe I can place an entry in syslog.conf but I'm not sure of the syntax

1 REPLY
Bill Hassell
Honored Contributor

Re: How can I send audit logging to syslog.log?

Auditing can be a very intensive activity which is why the audit log is actually two different logs to try to prevent locking up processes waiting for the audit records to be written. The syslog daemon is far too slow to handle the auditing system. And these log files can grow very rapidly (gigabytes) if too much detail is requested for the auditing. That's why it is imperative to move the (awful) default location for audit files.



Bill Hassell, sysadmin