Install Audit Tool In RHEL/CentOS/Fedora

Insight: How to Install Audit Tool in RHEL/CentOS/Fedora

Let’s jump into the process of installing audit tool in RHEL, CentOS and Fedora operating system.

Install Audit Tool In RHEL/CentOS/Fedora

Run the following command to make sure that the audit tool is installed on your system:

rpm -qa | grep audit

If not installed, run the following command to install Audit tool in RedHat, CentOS and  Fedora.

yum install audit

In next step, check if auditd tool is enabled and running in your system:

For CentOS/RHEL 6 
# service auditd status 
# service auditd start [Start] 
# chkconfig auditd on [Enable] 

For CentOS/RHEL 7 
# systemctl is-enabled auditd
# systemctl status auditd
# systemctl start auditd   [Start]
# systemctl enable auditd  [Enable]

You can configure auditd using the main configuration file /etc/audit/auditd.conf.

# vi /etc/audit/auditd.conf