User msg in Audit Viewer

User msg in Audit Viewer

[Brown, Curtis (cbrown31)]

[-- Attachment #1.1: Type: text/plain, Size: 510 bytes --]

I don't know if this the correct forum for questions about the Audit Viewer but here goes.

I wrote a test app to write an audit user message (audit_log_user_message).  This is successful.

I'm trying to display the msg="" portion of the audit record in Audit Viewer without success.

The msg portion doesn't show up in the "Other Fields"  displayed by Audit Viewer but is present in the actual audit record.

Any help would be appreciated or please point me to a forum that can answer my question.


[-- Attachment #1.2: Type: text/html, Size: 1103 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]

Re: User msg in Audit Viewer

[Miloslav Trmac]

[-- Attachment #1.1: Type: text/plain, Size: 789 bytes --]

Hello, 
can you please attach a sample (possibly one-line) log file? 

Thank you, 
Mirek 

----- Original Message -----

> I don’t know if this the correct forum for questions about the Audit
> Viewer but here goes.

> I wrote a test app to write an audit user message
> (audit_log_user_message). This is successful.

> I’m trying to display the msg=”” portion of the audit record in Audit
> Viewer without success.

> The msg portion doesn’t show up in the “Other Fields” displayed by
> Audit Viewer but is present in the actual audit record.

> Any help would be appreciated or please point me to a forum that can
> answer my question.

> --
> Linux-audit mailing list
> Linux-audit@redhat.com
> https://www.redhat.com/mailman/listinfo/linux-audit

[-- Attachment #1.2: Type: text/html, Size: 1549 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]

RE: User msg in Audit Viewer

[Brown, Curtis (cbrown31)]

I actually figured it out yesterday.  I just need to add name=value pairs as text in the user msg to be interpreted by Audit Viewer.

Thanks for the quick response.
________________________________
From: Miloslav Trmac [mitr@redhat.com]
Sent: Tuesday, February 26, 2013 2:29 AM
To: Brown, Curtis (cbrown31)
Cc: linux-audit@redhat.com
Subject: Re: User msg in Audit Viewer

Hello,
can you please attach a sample (possibly one-line) log file?

Thank you,
   Mirek

________________________________
I don’t know if this the correct forum for questions about the Audit Viewer but here goes.

I wrote a test app to write an audit user message (audit_log_user_message).  This is successful.

I’m trying to display the msg=”” portion of the audit record in Audit Viewer without success.

The msg portion doesn’t show up in the “Other Fields”  displayed by Audit Viewer but is present in the actual audit record.

Any help would be appreciated or please point me to a forum that can answer my question.


--
Linux-audit mailing list
Linux-audit@redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit