Re: why I have lost messages on boot even with very big backlog while I hunting only 2 syscalls?

Hello, On Thursday, September 28, 2017 4:51:38 AM EDT Lev Olshvang wrote: > 28.09.2017, 00:32, "Steve Grubb" : > > On Wednesday, September 27, 2017 4:41:29 PM EDT Lev Olshvang wrote: > >> Hello list ! > >> > >> A very technical question > >> I have Ubuntu 16.10 Virtual Box , auditd 2.7.8 > >>

Re: why I have lost messages on boot even with very big backlog while I hunting only 2 syscalls?

28.09.2017, 00:32, "Steve Grubb" : > On Wednesday, September 27, 2017 4:41:29 PM EDT Lev Olshvang wrote: >>  Hello list ! >> >>  A very technical question >>  I have Ubuntu 16.10 Virtual Box , auditd 2.7.8 >>  I have audit=1 parameter in grub.cfg >>  I see that /proc/cmdline indeed sees it >> >>