Issue

This Content is from Stack Overflow. Question asked by xirehat

When I run this command journalctl -fex, it has thousands of output lines and it is continuously outputting newer logs. All of these logs have audit at the beginning.

These are the audit logs that I have configured as rules in auditbeat.

When I stop the auditbeat service, The logs are still generated.

I want to prevent logs from being generated.

Thank you for helping me.

Solution

This question is not yet answered, be the first one who answer using the comment. Later the confirmed answer will be published as the solution.

This Question and Answer are collected from stackoverflow and tested by JTuto community, is licensed under the terms of CC BY-SA 2.5. - CC BY-SA 3.0. - CC BY-SA 4.0.