IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  linux audit.d rsyslog conf recommendations

    Posted 08/20/19 02:41 PM
    I was wondering besides the typical cron/authpriv inherent to linux, and stig audit.d rules does anyone have rsyslog and audit configurations they like for linux host logging?

    ------------------------------
    Alfonso Lalumia
    ------------------------------


  • 2.  RE: linux audit.d rsyslog conf recommendations

    Posted 08/21/19 08:41 AM
    I found this post helpful: https://gist.github.com/Neo23x0/9fe88c0c5979e017a389b90fd19ddfee.





    ------------------------------
    Jonatan Bucko
    ------------------------------



Related Content