auditd augenrules lost meaning
In RHEL 7.9 when using auditd I believe I have everything working well but when I do the above I see lost 4892
what does that lost value mean? Is it bad? Should I want that to be zero?
For reference below is my /etc/audit/auditd.conf
评论
?
参与讨论