This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Which item on /etc/audit/auditd.conf need been modified on SuSE Linux Plateform ??

Hi All 

My CG Server has upgrade to 6.3.x version and now I want to collect linux event from linux plateform like SLES

I check document it show 

============================

Configuring a Linux Auditing Subsystem
For RHEL and SUSE platforms, configure the audit daemon in the /etc/audit/auditd.conf file.

=============================

which items in this file need been modified ??

Because I could not see any event to send CG Server...I also find troubleshooting has 2 sub-items:

1. Policies Are Not Applied to the Agent

2. Events are not Generated After Configuring Change Guardian Agent for UNIX

Abut item-1 , I indeed could not see rules as screenshot:

about item-2 , I do not understand how to run " The path is set at the operating system: SET_PERL_LIBPATH=1; ./etc/vsaunix.cfg"

Thanks!!

Wencheng