Key based rate limiter (audit_set_rate_limit)
Anurag Aggarwal <[email protected]> Tue, 28 Feb 2023 16:23:04 +0530
| Newsgroups | com.redhat.linux-audit |
|---|---|
| Message-ID | <CAPoNrttQKG1uiUx=v6Cj8U0MnYMoU-ZP_Htmxn7F_Q7ZdUc9RA@mail.gmail.com> |
Hello All, The current rate limiter, audit_set_rate_limit limits all types of events. In our case, we want to limit auditd events with a specific key, as they are very noisy and consume very high CPU. From my understanding, this support is currently missing in AuditD. Is my understanding correct? -- Anurag Aggarwal -- Linux-audit mailing list [email protected] https://listman.redhat.com/mailman/listinfo/linux-audit