Skip to content

Commit ebd03ff

Browse files
committed
Update run-analyzer-linux.md
1 parent 380031d commit ebd03ff

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

defender-endpoint/run-analyzer-linux.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -363,7 +363,7 @@ Add exclusions for audit-d monitoring.
363363
364364
Usage example: `sudo ./MDESupportTool exclude -d /var/foo/bar`
365365
366-
### AuditD Rate Limiter
366+
### AuditD rate limiter
367367
368368
Syntax that can be used to limit the number of events reported by the auditD plugin. This option sets the rate limit globally for AuditD causing a drop in all the audit events. When the limiter is enabled the number of auditd events are limited to 2500 events/sec. This option can be used in cases where we see high CPU usage from AuditD side.
369369
@@ -380,7 +380,7 @@ Usage example: `sudo ./mde_support_tool.sh ratelimit -e true`
380380
> [!NOTE]
381381
> This functionality should be carefully used as limits the number of events being reported by the auditd subsystem as a whole. This could reduces the number of events for other subscribers as well.
382382
383-
### AuditD Skip Faulty Rules
383+
### AuditD skip faulty rules
384384
385385
This option enables you to skip the faulty rules added in the auditd rules file while loading them. This option allows the auditd subsystem to continue loading rules even if there's a faulty rule. This option summarizes the results of loading the rules. In the background, this option runs the auditctl with the -c option.
386386

0 commit comments

Comments
 (0)