Product Package Red Hat Linux
No not yet, we had to make significant changes to the auditd parser. We have been working on it on and off the past couple of weeks.
Are you willing to help us out at all?
Thx for the answer.
We are willing to help, we have already made a merge flexconnector for making the multi lines of Auditd to a Single Line for some of the events.
Is this package already available for download?
I would realize the "Operating System Monitoring" Use Case, but don't find the "Red Hat Linux - Indicators and Warnings" arb. (same for "Microsoft Windows - Indicators and Warnings" package)
Unfortunately, we are still in testing with the Linux product package. We are also deprecating the OS monitoring packages and replacing them with two sets of packages, Host Monitoring and User Monitoring. Host Monitoring has been released, but we have not yet completed User Monitoring. Both the Windows and the Linux product packages will be released with the User Monitoring package.
We may have an upgrade & migration script for OS monitoring like we do for Perimeter and Network Monitoring, but it may be a simple uninstall OS monitoring and install the new packages. We'll have better details and instructions for everyone as soon as we can.
Thanks & fyi,