Question: How Do I Enable Audit Logs in Ubuntu?
Contents

How do I check audit logs in Ubuntu?

By default the audit events go to the file, “/var/log/audit/audit. log”. You can forward audit events to syslog by modifying “/etc/audisp/plugins.

How do I enable audit logs in Linux?

Solution

  1. Login to the linux box and assume root. …
  2. Edit /etc/profile and add the following lines to the bottom of the file: …
  3. Save and exit /etc/profile.
  4. Edit /etc/rsyslog.conf and add the following lines to the bottom of the file: …
  5. Save and exit /etc/rsyslog.conf.
Alexander Ross

Alexander Ross

Gaming, Esports & Interactive Media Writer

Alexander Ross has covered the video game industry for a decade, writing deep dives on game design, esports tournaments, VR developments, and gaming culture.

Share this article
Twitter Facebook Pinterest