Sentinel, Threat Detection, Auditd, Information Security, Blue Team.
Grant read permissions on the log files to these users, using # POSIX ACLs read-users = [ "_laurel" ] # Add a prefix to every output line. The CEE cookie can be used to # instruct consumers to parse the JSON document, cf. # https://www.rsyslog.com/doc/master/configuration/modules/mmjsonparse.html #