auditd augenrules lost meaning

In RHEL 7.9 when using auditd I believe I have everything working well but when I do the above I see lost 4892

what does that lost value mean? Is it bad? Should I want that to be zero?

For reference below is my /etc/audit/auditd.conf

添加评论
点赞收藏
点踩分享查看原文
评论
?
参与讨论