62 questions
Does Syslog in Linux include PID information like SecurityEvent log in Windows?
CJ Jung
0
Reputation points
Hi
I wonder why syslog collected in Linux does not have PID information.
Is there any way to collect PID and PPID information from Linux?
For example, in Windows, SecurityEvent log include information about PID (i.e., which command is executed), so that users can trace back which process is called by which process.
Maybe it can be possible by configuring something, but I don't see this in Linux.
Anyone can give me a help?
Is creating custom log only way to do this?
Microsoft Security | Intune | Microsoft Intune Linux
Sign in to answer