Hi All
My CG Server has upgrade to 6.3.x version and now I want to collect linux event from linux plateform like SLES
I check document it show
============================
Configuring a Linux Auditing Subsystem
For RHEL and SUSE platforms, configure the audit daemon in the /etc/audit/auditd.conf file.
=============================
which items in this file need been modified ??
Because I could not see any event to send CG Server...I also find troubleshooting has 2 sub-items:
1. Policies Are Not Applied to the Agent
2. Events are not Generated After Configuring Change Guardian Agent for UNIX
Abut item-1 , I indeed could not see rules as screenshot:
about item-2 , I do not understand how to run " The path is set at the operating system: SET_PERL_LIBPATH=1; ./etc/vsaunix.cfg"
Thanks!!
Wencheng