Skip to content

Commit b9fe578

Browse files
committed
update README
1 parent 925bd2d commit b9fe578

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

README.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -214,8 +214,8 @@ Another way to check performance is to use
214214
auditctl --signal state
215215
cat /var/run/auditd.state
216216
217-
audit version = 3.1.2
218-
current time = 08/24/23 20:21:31
217+
audit version = 4.0.5
218+
current time = 06/02/25 20:21:31
219219
process priority = -4
220220
writing to logs = yes
221221
current log size = 2423 KB
@@ -231,17 +231,17 @@ admin space action performed = no
231231
disk error detected = no
232232
Number of active plugins = 1
233233
current plugin queue depth = 0
234-
max plugin queue depth used = 4
234+
max plugin queue depth used = 5
235235
plugin queue size = 2000
236236
plugin queue overflow detected = no
237237
plugin queueing suspended = no
238238
listening for network connections = no
239-
glibc arena (total memory) is: 244 KB, was: 244 KB
240-
glibc uordblks (in use memory) is: 90 KB, was: 90 KB
241-
glibc fordblks (total free space) is: 153 KB, was: 154 KB
239+
glibc arena (total memory) is: 388 KB, was: 388 KB
240+
glibc uordblks (in use memory) is: 92 KB, was: 90 KB
241+
glibc fordblks (total free space) is: 295 KB, was: 297 KB
242242
```
243243

244-
This command causes auditd to dump its internal metrics to /var/run/auditd.state. This can tell you if auditd is healthy.
244+
This command causes auditd to dump its internal metrics to /var/run/auditd.state. This can tell you if auditd is healthy. Also, you can make auditd periodically update the state file by adjusting the report_interval setting in auditd.conf (note - only available in audit-4.0.5 and later). See the man page for details. Setting this allows for the conitinuous updating for metrics collection.
245245

246246
AUPARSE
247247
-------

0 commit comments

Comments
 (0)