How To Install audispd-plugins on CentOS 7

In this tutorial we learn how to install audispd-plugins on CentOS 7. audispd-plugins is Plugins for the audit event dispatcher

Introduction

In this tutorial we learn how to install audispd-plugins on CentOS 7.

What is audispd-plugins

The audispd-plugins package provides plugins for the real-time interface to the audit system, audispd. These plugins can do things like relay events to remote machines.

We can use yum or dnf to install audispd-plugins on CentOS 7. In this tutorial we discuss both methods but you only need to choose one of method to install audispd-plugins.

Install audispd-plugins on CentOS 7 Using yum

Update yum database with yum using the following command.

sudo yum makecache

After updating yum database, We can install audispd-plugins using yum by running the following command:

sudo yum -y install audispd-plugins

Install audispd-plugins on CentOS 7 Using dnf

If you don’t have dnf installed you can install dnf first. Update yum database with dnf using the following command.

sudo dnf makecache

After updating yum database, We can install audispd-plugins using dnf by running the following command:

sudo dnf -y install audispd-plugins

How To Uninstall audispd-plugins on CentOS 7

To uninstall only the audispd-plugins package we can use the following command:

sudo dnf remove audispd-plugins

audispd-plugins Package Contents on CentOS 7

/etc/audisp/audisp-remote.conf
/etc/audisp/plugins.d/au-remote.conf
/etc/audisp/plugins.d/audispd-zos-remote.conf
/etc/audisp/zos-remote.conf
/sbin/audisp-remote
/sbin/audispd-zos-remote
/usr/share/man/man5/audisp-remote.conf.5.gz
/usr/share/man/man5/zos-remote.conf.5.gz
/usr/share/man/man8/audisp-remote.8.gz
/usr/share/man/man8/audispd-zos-remote.8.gz
/var/spool/audit

References

Summary

In this tutorial we learn how to install audispd-plugins on CentOS 7 using yum and dnf.