July 27, 2016 Niels Kobschätzki I don’t have by any chance any followers that forward auditd-logs to logstash via rsyslog, do I?