Skip to main content

​
Supported capabilities

Manual log source
  • Manual log source: Linux auditd — Send Linux auditd records and journald auth messages to Sazabi through Fluent Bit or the OpenTelemetry Collector, with audit fields parsed into attributes.
Each connection method has its own setup and permissions. Connecting one method does not enable the others.

​
About

Use Linux auditd with Sazabi through a manual log source. Choose a supported capability above to see setup instructions and verification steps.