[rsyslog-notify] Forum Thread: Re: Rsyslog and Remote Audit Logging - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25709#p25709

Message: 
----------
you could modify the SELinux policy to allow access to the files.

reading from the files and having auditd send to rsyslog are two different
ways of doing the same thing. I prefer to have things delivered to rsyslog
rather than having them written to disk and then scraped from disk later
(less I/O and load on the system to do direct)