LXer: Track KVM guests with libvirt and the Linux audit subsystem
 

Published at LXer:

Libvirt is an important tool for managing virtualized environments on Linux hosts. An audit trail of events that occur on the host during libvirt[he]apos[/he]s execution is often necessary for monitoring, compliance, forensics, and other purposes. This article describes how to use the Linux audit subsystem on the host to track operations performed by libvirt and how to correlate the events with other host events to provide a consistent and comprehensive view of changes performed through libvirt.

Read More...