Welcome to Linux Forums! With a comprehensive Linux Forum, information on various types of Linux software and many Linux Reviews articles, we have all the knowledge you need a click away, or accessible via our knowledgeable members.
I have a solaris box which runs 24x7 auditing functions which log diverse sets of different processes on a totally isolated LAN. The solaris box saves the audit logs as BSM Files....The security audit app on the Solaris box utilizes tools such as praudit and auditreduce. IN case you were wondering, each tool analyzes the BSM files either by outputting the BSM data in a Human Readable format or drilling down into the BSM data files to determine specific auditing results.
Now, I have a Linux box that I will be utilizing in the mix on a seperate LAN, completely isolated from the Solaris box. The BSM files are handed off via hard drive. I've seen a few things out there like openbsm or freebsm, i've had great difficulty installing these apps on my Kubuntu Machine (Feisty). Can anyone recommend some possible solutions for viewing the BSM data on my Kubuntu box in a readable format? Also, I wanted to throw out the application "Splunk" anyone use this search app before? I'll leave it at that, hoping to open this up with some more ideas/suggestions as I'm fairly new to Linux.
A Newbie's Getting Started Guide to Linux
Learn the basics of the Linux operating systems. Get to know what it is all about, and familiarize yourself with the practical side. Basically, if you're a complete Linux newbie and looking for a quick and easy guide to get you started this is it. subscribe
Open Source Security Myths Dispelled Dispel the five major myths surrounding Open Source Security and gain the tools necessary to make a truly informed decision for your IT organization subscribe
InformationWeek InformationWeek is the only newsweekly you'll need to stay on top of the latest developments in information technology. subscribe