Use a script as a dispatcher

public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed

* Use a script as a dispatcher
@ 2013-12-25 11:33 Aaron Lewis
  2014-01-02 14:32 ` Steve Grubb
  0 siblings, 1 reply; 2+ messages in thread
From: Aaron Lewis @ 2013-12-25 11:33 UTC (permalink / raw)
  To: linux-audit@redhat.com

Hi,

Can I use a perl script as a dispatcher? any examples

-- 
Best Regards,
Aaron Lewis - PGP: 0xDFE6C29E ( http://keyserver.veridis.com )
Finger Print: 9482 448F C7C3 896C 1DFE 7DD3 2492 A7D0 DFE6 C29E

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: Use a script as a dispatcher
  2013-12-25 11:33 Use a script as a dispatcher Aaron Lewis
@ 2014-01-02 14:32 ` Steve Grubb
  0 siblings, 0 replies; 2+ messages in thread
From: Steve Grubb @ 2014-01-02 14:32 UTC (permalink / raw)
  To: Aaron Lewis; +Cc: linux-audit@redhat.com

On Wed, 25 Dec 2013 19:33:04 +0800
Aaron Lewis <the.warl0ck.1989@gmail.com> wrote:
> Can I use a perl script as a dispatcher? any examples

Sure. The requirements are outlined here:
http://people.redhat.com/sgrubb/audit/audit-rt-events.txt

However, the problem is that to make sense of the events, you probably
need to parse them and in many cases interpret them. I would suggest
using libauparse for this task. It has python bindings but none for
perl.

-Steve

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2014-01-02 14:32 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-12-25 11:33 Use a script as a dispatcher Aaron Lewis
2014-01-02 14:32 ` Steve Grubb

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox