<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Well it is just the audit.log so any tool that could collect the
audit.log would collect the SELinux logs.<br>
<br>
You might want to look at
<a class="moz-txt-link-freetext" href="http://linux.die.net/man/5/audisp-remote.conf">http://linux.die.net/man/5/audisp-remote.conf</a><br>
<br>
Which I believe can be setup to remote the logs.<br>
<br>
<br>
<div class="moz-cite-prefix">On 09/16/2014 05:28 AM, Maurizio Pagani
wrote:<br>
</div>
<blockquote
cite="mid:CA+SaE3s5NJCQOckzwYfcOy2k==xpPE3sJdwC_g54o=1d_iV9Zg@mail.gmail.com"
type="cite">
<div dir="ltr">Hi everybody.
<div><br>
</div>
<div>I'll want configure SELinux in 1000+ Systems, but i need to
know, if there is a method or product that collect all logs of
SELinux and create a mirror of what are happening in the
systems.</div>
<div><br>
</div>
<div>An example is snorby for suricata or snort (IDS/IPS):</div>
<div><a moz-do-not-send="true"
href="http://www.rivy.org/wp-content/uploads/2013/03/snorby-screenshot.png">http://www.rivy.org/wp-content/uploads/2013/03/snorby-screenshot.png</a><br>
</div>
<div><br>
</div>
<div>Let me know.</div>
<div><br>
</div>
<div>Thanks in advance.</div>
<div><br>
</div>
<div>Maurizio Pagani</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
selinux mailing list
<a class="moz-txt-link-abbreviated" href="mailto:selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/selinux">https://admin.fedoraproject.org/mailman/listinfo/selinux</a></pre>
</blockquote>
<br>
</body>
</html>