From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: Advice on enriching logs with user and group names before moving them to a central log repository Date: Mon, 06 Aug 2012 13:51:35 -0400 Message-ID: <4890289.bEcEd1EjZH@x2> References: <1343904854.4074.76.camel@swtf> <501A86A6.1020004@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <501A86A6.1020004@redhat.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Thursday, August 02, 2012 09:54:46 AM John Dennis wrote: > There were plans to author a audit plugin that would augment the data > items with their (interpreted) value. I'm not sure whatever happened to > that plugin. Steve, can you elaborate? This is a problem and I think about it every now and then. But there are bigger problems first. -Steve