Latest / Linux Server Admin with Fexingo: Sysadmin, Bash, and Server Engineering
How to Use Linux Auditd for Security Monitoring
In this episode of Linux Server Admin, Lucas and Luna explore the power of auditd, the Linux audit daemon, for tracking security-relevant events on your servers. They walk through a practical setup for monitoring file access and user commands, explaining how audit rules work, how to interpret audit logs, and how to use ausearch and aureport to make sense of the data. They also discuss performance considerations and common pitfalls, such as log rotation and rule ordering. By the end, you'll know how to configure auditd to catch suspicious activity on your own systems, and why it beats simple…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.