adm9000-3

Send data to another system and load to elastic

1

I am trying to establish a chain: rsyslog -> syslog-ng (another server) -> elasticsearch. elasticsearch working on localhost of another server (with syslog-ng). Thats why i cant to use rsyslog...

--log-output=off making broken audit log

9

I want to record session without output, just like 'history' command in Linux. 'history on steroids'. But when i am doing that: tlog-rec --log-input=on --log-output=off --log-window=off --writer=file --file-path=/var/log/sessions/session.log I receiving...

Audit log is torn to pieces

2

Hello, i am trying to record session and put it in elasticsearch but commands dont logging properly. In many cases they are just deviding by chunks and some commands contain...