Update how_to_deploy_audisp_remote_for_audit_log.mkd
This commit is contained in:
parent
0349040bb4
commit
d262a18d70
|
@ -50,6 +50,12 @@ If not record logs on local filesystem, Modify /etc/audit/auditd.conf:
|
|||
write_logs = no
|
||||
```
|
||||
|
||||
Set name_format of /etc/audisp/audispd.conf to NUMERIC, in audit.log, the node will record the IP address:
|
||||
```
|
||||
name_format = NUMERIC
|
||||
```
|
||||
** Note: The IP address may be 127.0.1.1, please modify it in /etc/hosts. You can use hostname -i to check whether it is the correct address. **
|
||||
|
||||
### Restart service
|
||||
Restart auditd service:
|
||||
```
|
||||
|
|
Loading…
Reference in New Issue