NAME | DESCRIPTION | SEE ALSO | AUTHOR | COLOPHON |
ZOS-REMOTE.CONF(5) System Administration Utilities ZOS-REMOTE.CONF(5)
zos-remote.conf - the audisp-racf plugin configuration file
zos-remote.conf controls the configuration for the audispd-zos-remote(8) Audit dispatcher plugin. The default location for this file is /etc/audisp/zos-remote.conf, however, a different file can be specified as the first argument to the audispd-zos-remote plugin. See audispd-zos-remote(8) and auditd(8). The options available are as follows: server This is the IBM z/OS ITDS server hostname or IP address port The port number where ITDS is running on the z/OS server. Default is 389 (ldap port) user The z/OS RACF user ID which the audispd-zos-remote plugin will use to perform Remote Audit requests. This user needs READ access to FACILITY Class resource IRR.LDAP.REMOTE.AUDIT (See audispd-zos-remote(8)). password The password associated the the z/OS user ID configured above. timeout The number in seconds that audispd-zos-remote plugin will wait before giving up in connection attempts and event submissions. The default value is 15 q_depth The audispd-zos-remote plugin will queue inputed events to the maximum of q_depth events while trying to submit those remotely. This can handle burst of events or in case of a slow network connection. However, the audispd-zos-remote plugin will drop events in case the queue is full. The default queue depth is 64 - Increase this value in case you are experiencing event drop due to full queue (audispd-zos-remote will log this to syslog).
audispd-zos-remote(8)
Klaus Heinrich Kiwi <klausk@br.ibm.com>
This page is part of the audit (Linux Audit) project. Information
about the project can be found at
⟨http://people.redhat.com/sgrubb/audit/⟩. If you have a bug report
for this manual page, send it to linux-audit@redhat.com. This page
was obtained from the project's upstream Git repository
⟨https://github.com/linux-audit/audit-userspace.git⟩ on 2017-07-05.
If you discover any rendering problems in this HTML version of the
page, or you believe there is a better or more up-to-date source for
the page, or you have corrections or improvements to the information
in this COLOPHON (which is not part of the original manual page),
send a mail to man-pages@man7.org
IBM Oct 2007 ZOS-REMOTE.CONF(5)
Pages that refer to this page: audispd-zos-remote(8)