The following shows an example of the auditlog.conf file:
# Specify an integer for Facility. (specifiable range: 1-23) Log.Facility 1 # Specify the event category. # You can specify any of the following: # StartStop, Failure, LinkStatus, ExternalService, # Authentication, AccessControl, ContentAccess, # ConfigurationAccess, Maintenance, or AnomalyEvent. Log.Event.Category StartStop,Failure,LinkStatus,ExternalService,Authentication,AccessControl,ContentAccess,ConfigurationAccess,Maintenance,AnomalyEvent # Specify an integer for Severity. (specifiable range: 0-7) Log.Level 6
In the example above, all types of audit events are output.
For Windows, Log.Level 6 outputs audit log data corresponding to the Error, Warning, and Information levels. For Linux, Log.Facility 1 outputs the audit log data to the syslog file that is defined as the user facility in the syslog.conf file.