Hi,
I'm completely new to eDir auditing/loging so please be gentle.

We have eDir 8.8.8 SP8 on OES11 SP3 and would like to send log/audit
events via *syslog* to a log server. Among other events we'd like to log
successful *and failed logins.*
All events should be sent to central syslog server (we cannot use
Sentinel).

As far as I found out there are two systems for collecting and sending
logs - XDAS and Audit. I've set up XDAS to send events via syslog
without difficulties however it doesn't log failed login attempts.


Questions:
Can failed login attempts only be logged with Audit?
Can Audit send its events through XDAS?
Can Audit send (syslog formatted) events via syslog protocol?

Thank you for your answers!


--
ast75
------------------------------------------------------------------------
ast75's Profile: https://forums.netiq.com/member.php?userid=10614
View this thread: https://forums.netiq.com/showthread.php?t=54407