Red Hat Bugzilla – Bug 787188
libvirt is not producing audit events
Last modified: 2012-02-08 12:38:04 EST
Description of problem:
I have been running KVM this week bringing VM's up and down. But when I look for audit events there are none:
ausearch --start this-week -m VIRT_CONTROL
There should be audit events.
Turns out there was a parsing problem in ausearch.