From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: Use a script as a dispatcher
Date: Thu, 2 Jan 2014 09:32:00 -0500
Message-ID: <20140102093200.6f224f84@ivy-bridge>
References: <CAJZVxR=eFJEO7rm=pxr=PB7TyfPkQfcbe2Zj9UhC_o1P=qKafw@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <CAJZVxR=eFJEO7rm=pxr=PB7TyfPkQfcbe2Zj9UhC_o1P=qKafw@mail.gmail.com>
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: Aaron Lewis <the.warl0ck.1989@gmail.com>
Cc: "linux-audit@redhat.com" <linux-audit@redhat.com>
List-Id: linux-audit@redhat.com

On Wed, 25 Dec 2013 19:33:04 +0800
Aaron Lewis <the.warl0ck.1989@gmail.com> wrote:
> Can I use a perl script as a dispatcher? any examples

Sure. The requirements are outlined here:
http://people.redhat.com/sgrubb/audit/audit-rt-events.txt

However, the problem is that to make sense of the events, you probably
need to parse them and in many cases interpret them. I would suggest
using libauparse for this task. It has python bindings but none for
perl.

-Steve