Description
Adds plugins used by the Linux audit event dispatcher to send or process security audit events. These pieces extend the audit system rather than providing a normal desktop application.
Administrators use it on systems where audit logs must be forwarded, transformed, or integrated with other monitoring tools. Incorrect audit configuration can hide important security events or create noisy logs.