How to set Linux stand-alone log audit

This article mainly explains the "Linux stand-alone log audit how to set", the article explains the content is simple and clear, easy to learn and understand, the following please follow the editor's ideas slowly in-depth, together to study and learn "Linux stand-alone log audit how to set" it!

1: first check to see if sudo and rsyslog services are installed

2: if no service is found, yum can be used to install related services.

3: / etc/rsylog.conf file add content

4: view the content

After completing the above four steps, the stand-alone log audit is simply completed. If someone uses the sudo command to operate, we will check the log file to monitor the operation command.

To be clear: this setting will only monitor other users when they use the sudo command, but not for other normal operations.

Thank you for your reading, the above is the content of "how to set Linux stand-alone log audit". After the study of this article, I believe you have a deeper understanding of how to set up Linux stand-alone log audit, and the specific use needs to be verified in practice. Here is, the editor will push for you more related knowledge points of the article, welcome to follow!