auditd
auditd MQL resource for querying Operating System infrastructure with cnquery and cnspec.
Operating System
Use MQL in cnspec shell or policy:
auditdRelationships
4 resources · 3 relationships·Click to select, expand fields to see properties.
Fields (3)
| Field | Type | Description |
|---|---|---|
config | auditd.config | auditd (Linux Audit Daemon) configuration |
ruleprivate | auditd.rule | auditd (Linux Audit Daemon) rule |
rules | auditd.rules | auditd (Linux Audit Daemon) rules aggregated on disk |
Field Details
rulesauditd.rules
via /etc/audit/audit.rules by default