Re: Dispatcher buffer size

Steve Grubb
2008-11-11T03:05:36Z

On Monday 10 November 2008 16:08:59 Kevin Boyce wrote:
> Does anyone know if there is a way to adjust the buffer size between the
> auditd process and the dispatcher?

The buffer size is whatever the kernel gives pipes. The main adjustment you
have is either the priority setting so that audit gets more runtime or
adjusting the size of the internal audispd buffer.

-Steve