From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marcus Inskip Subject: Changing Syslog facility Date: Fri, 19 Sep 2014 16:14:44 +0100 Message-ID: <797234C7-A98F-483E-9C8A-D5BFD2ABBDB4@icloud.com> Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: quoted-printable Return-path: Received: from mx1.redhat.com (ext-mx16.extmail.prod.ext.phx2.redhat.com [10.5.110.21]) by int-mx14.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id s8JFFfNf025193 for ; Fri, 19 Sep 2014 11:15:41 -0400 Received: from nk11p22im-asmtp001.me.com (nk11p22im-asmtp001.me.com [17.159.8.160]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id s8JFFISY029966 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=FAIL) for ; Fri, 19 Sep 2014 11:15:19 -0400 Received: from [192.168.2.35] (139-223-168-194.static.virginm.net [194.168.223.139]) by nk11p22im-asmtp001.me.com (Oracle Communications Messaging Server 7u4-27.10(7.0.4.27.9) 64bit (built Jun 6 2014)) with ESMTPSA id <0NC5005AJMCLG2C0@nk11p22im-asmtp001.me.com> for linux-audit@redhat.com; Fri, 19 Sep 2014 15:14:48 +0000 (GMT) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com Cc: parryben@uk.ibm.com List-Id: linux-audit@redhat.com Hi, I=92m trying to change the logging facility of audispd to local2 to send lo= gs off to a remote server via Rsyslog without logging twice is this possibl= e? = Many thanks in advance, Marcus