Auditing and Remote Log Host(s)

[john guardian]

Is there a built-in facility (IE:option[s]) for logging (auditing info) directly to a remote loghost or for moving rotated audit logs to remote hosts... other than using cron to sftp old audit logs (or NFS) to preserve them for the Security Admins to review?

Thx in advance for any/all info.

[Steven E. Protter]

Shalom,

I know of no built in facility.

You need to write a shell script.

find with the +mtime will get you a list of files to move.

mtime is modification time.

SEP

[Dennis Handly]

>SEP: find with the +mtime

Slight typo: find with -mtime +number-days