From mboxrd@z Thu Jan 1 00:00:00 1970 From: John Dennis Subject: Re: [PATCH] Add auditd listener and remote audit protocol Date: Thu, 14 Aug 2008 19:00:36 -0400 Message-ID: <48A4B914.80306@redhat.com> References: <200808142143.m7ELh0MP028560@greed.delorie.com> <1218751136.7022.206.camel@homeserver> <200808142216.m7EMGILI029666@greed.delorie.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <200808142216.m7EMGILI029666@greed.delorie.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: DJ Delorie Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com DJ Delorie wrote: > The net result is to aggregate audit logs from many systems onto one > central audit server. Remote audit messages have the new "node=" tag > on them so you know where they came from. > The field name was "host", is the "node=" a typo or did the field name change? -- John Dennis