????
Current Path : /etc/imunify-auditd-log-reader/ |
Current File : //etc/imunify-auditd-log-reader/config.yaml |
logging: trace_logging: false statistics: report_period: 3h # set to -1 to disable send-all behaviour send_limit: 500 # these paths will be excluded by auditd suppress rules # absolute path entries will be added only when they matched by BASEDIR # relative entries like `logs` is searched with equivalence of `find /BASEDIR -name logs -depth 2` command auditd_exclude: - public_html/error_log - error_log - public_html/wp-content/debug.log - _rule_:-F uid=mysql - _rule_:-F uid=mariadb monitor_paths: - /etc/valiases/ - /etc/vfilters/ - /etc/vdomainaliases/ - _rule_:-F filetype=file -F path=/usr/local/cpanel/uapi -F perm=rwxa # filter ordering is preserved and can affect performance greatly # filters are matched using strings.Contains method filters: drop: - /litespeed/ - /session/ - debug.log - error_log - error.log - /logs/ - /log/ - /tmp/#sql_ - /sess_ - /mail/ send: - /etc/valiases/ - /etc/vfilters/ - /etc/vdomainaliases/ store_and_send: - /usr/local/cpanel/uapi