Auditbeat reliance on auditd

Hello, question,

on my Centos7 servers, if I install auditbeat, do I need to have auditd process running or is auditbeat able to pick up all audit events by itself?

Should I run both auditd and auditbeat services, or only auditbeat?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.