From mboxrd@z Thu Jan 1 00:00:00 1970 From: Miloslav Trmac Subject: Re: [RFC] New ausearch output option & audit viewing in Spacewalk Date: Mon, 8 Jun 2009 13:35:55 -0400 (EDT) Message-ID: <1601159922.3173301244482555326.JavaMail.root@zmail07.collab.prod.int.phx2.redhat.com> References: <4A2D406D.1080105@gtri.gatech.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <4A2D406D.1080105@gtri.gatech.edu> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Joshua Roys Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com Hello, ----- "Joshua Roys" wrote: > As part of developing an audit viewing "plugin"[1] to Spacewalk[2], I > wrote a small program to use libauparse to output (easily) > machine-parsable audit logs. I think this functionality would be nice > to have in ausearch, and as such, wrote a patch for it. If all you want is machine-readable name=value pairs, auparse provides a C/Python interface. It's not 100% the same as the ausearch output, though. Mirek