How To Install rsyslog-mmaudit on CentOS 8

rsyslog-mmaudit is Message modification module supporting Linux audit format

Introduction

In this tutorial we learn how to install rsyslog-mmaudit on CentOS 8.

What is rsyslog-mmaudit

This module provides message modification supporting Linux audit format in various settings.

We can use yum or dnf to install rsyslog-mmaudit on CentOS 8. In this tutorial we discuss both methods but you only need to choose one of method to install rsyslog-mmaudit.

Install rsyslog-mmaudit on CentOS 8 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

The output should look something like this:

CentOS Linux 8 - AppStream                                       43 kB/s | 4.3 kB     00:00    
CentOS Linux 8 - BaseOS                                          65 kB/s | 3.9 kB     00:00    
CentOS Linux 8 - ContinuousRelease                               43 kB/s | 3.0 kB     00:00    
CentOS Linux 8 - Extras                                          23 kB/s | 1.5 kB     00:00    
CentOS Linux 8 - FastTrack                                       40 kB/s | 3.0 kB     00:00    
CentOS Linux 8 - HighAvailability                                36 kB/s | 3.9 kB     00:00    
CentOS Linux 8 - Plus                                            24 kB/s | 1.5 kB     00:00    
CentOS Linux 8 - PowerTools                                      50 kB/s | 4.3 kB     00:00    
Extra Packages for Enterprise Linux Modular 8 - x86_64           13 kB/s | 9.2 kB     00:00    
Extra Packages for Enterprise Linux 8 - x86_64                   24 kB/s | 8.5 kB     00:00    
Metadata cache created.

After updating yum database, We can install rsyslog-mmaudit using dnf by running the following command:

sudo dnf -y install rsyslog-mmaudit

Install rsyslog-mmaudit on CentOS 8 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

The output should look something like this:

CentOS Linux 8 - AppStream                                       43 kB/s | 4.3 kB     00:00    
CentOS Linux 8 - BaseOS                                          65 kB/s | 3.9 kB     00:00    
CentOS Linux 8 - ContinuousRelease                               43 kB/s | 3.0 kB     00:00    
CentOS Linux 8 - Extras                                          23 kB/s | 1.5 kB     00:00    
CentOS Linux 8 - FastTrack                                       40 kB/s | 3.0 kB     00:00    
CentOS Linux 8 - HighAvailability                                36 kB/s | 3.9 kB     00:00    
CentOS Linux 8 - Plus                                            24 kB/s | 1.5 kB     00:00    
CentOS Linux 8 - PowerTools                                      50 kB/s | 4.3 kB     00:00    
Extra Packages for Enterprise Linux Modular 8 - x86_64           13 kB/s | 9.2 kB     00:00    
Extra Packages for Enterprise Linux 8 - x86_64                   24 kB/s | 8.5 kB     00:00    
Metadata cache created.

After updating yum database, We can install rsyslog-mmaudit using yum by running the following command:

sudo yum -y install rsyslog-mmaudit

How To Uninstall rsyslog-mmaudit on CentOS 8

To uninstall only the rsyslog-mmaudit package we can use the following command:

sudo dnf remove rsyslog-mmaudit

rsyslog-mmaudit Package Contents on CentOS 8

/usr/lib/.build-id
/usr/lib/.build-id/3b/dc1c3128e2754943bb78f98c2ebf148fd758df
/usr/lib64/rsyslog/mmaudit.so
/usr/lib/.build-id
/usr/lib/.build-id/46
/usr/lib/.build-id/46/820b8c0b697a0a98a5c82247480e8110ea8c23
/usr/lib64/rsyslog/mmaudit.so

References

Summary

In this tutorial we learn how to install rsyslog-mmaudit on CentOS 8 using yum and dnf.