I'm completely new to eDir auditing/loging so please be gentle.

We have eDir 8.8.8 SP8 on OES11 SP3 and would like to send log/audit
events via *syslog* to a log server. Among other events we'd like to log
successful *and failed logins.*
All events should be sent to central syslog server (we cannot use

As far as I found out there are two systems for collecting and sending
logs - XDAS and Audit. I've set up XDAS to send events via syslog
without difficulties however it doesn't log failed login attempts.

Can failed login attempts only be logged with Audit?
Can Audit send its events through XDAS?
Can Audit send (syslog formatted) events via syslog protocol?

Thank you for your answers!

ast75's Profile: https://forums.netiq.com/member.php?userid=10614
View this thread: https://forums.netiq.com/showthread.php?t=54407