* audit-viewer serial number?
@ 2008-09-29 17:03 LC Bruzenak
2008-09-29 20:55 ` Miloslav Trmač
0 siblings, 1 reply; 3+ messages in thread
From: LC Bruzenak @ 2008-09-29 17:03 UTC (permalink / raw)
To: linux-audit
How can I specify the serial number as one of the audit-viewer columns?
I know how to add columns, but I think since the SN is not named it may
not be in the available columns list. That or I missed it.
I can see the SN if I double-click on the event, as part of the ID in
the top of the "Event Details" window, however I'd like to be able to
see the numbers in a column.
Thx,
LCB.
--
LC (Lenny) Bruzenak
lenny@magitekltd.com
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: audit-viewer serial number?
2008-09-29 17:03 audit-viewer serial number? LC Bruzenak
@ 2008-09-29 20:55 ` Miloslav Trmač
2008-09-30 1:27 ` Steve Grubb
0 siblings, 1 reply; 3+ messages in thread
From: Miloslav Trmač @ 2008-09-29 20:55 UTC (permalink / raw)
To: LC Bruzenak; +Cc: linux-audit
Hello,
LC Bruzenak píše v Po 29. 09. 2008 v 12:03 -0500:
> How can I specify the serial number as one of the audit-viewer columns?
You can't.
This would best be fixed as a general expansion of the "field value
interpretation" part of libauparse.
Filed as https://fedorahosted.org/audit-viewer/ticket/5 .
Mirek
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: audit-viewer serial number?
2008-09-29 20:55 ` Miloslav Trmač
@ 2008-09-30 1:27 ` Steve Grubb
0 siblings, 0 replies; 3+ messages in thread
From: Steve Grubb @ 2008-09-30 1:27 UTC (permalink / raw)
To: linux-audit; +Cc: Miloslav Trmač
On Monday 29 September 2008 16:55:27 Miloslav Trmač wrote:
> This would best be fixed as a general expansion of the "field value
> interpretation" part of libauparse.
The serial number is accessible at the event level, not the record or field
level. I suppose we could add access at the field level.
-Steve
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2008-09-30 1:27 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-09-29 17:03 audit-viewer serial number? LC Bruzenak
2008-09-29 20:55 ` Miloslav Trmač
2008-09-30 1:27 ` Steve Grubb
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox