auditd-plugins - Linux


auditd-plugins enables and manages the use of plugins with the auditd daemon, a tool used for auditing system activity in Linux. Plugins provide additional functionality and customization options for auditd.


auditd-plugins [options] <plugin> <command> [parameters]


  • -h, –help: Display help information
  • -V, –version: Print version information
  • -l, –list-plugins: List installed plugins
  • -t, –test: Test a plugin without actually loading it
  • -a, –activate-plugin: Activate a plugin
  • -d, –deactivate-plugin: Deactivate a plugin
  • -s, –status-plugin: Check plugin status
  • -c, –config-plugin: Configure a plugin
  • -p, –plugin-path: Specify path to plugin directory
  • -o, –log-file: Specify log file path


Listing Installed Plugins

auditd-plugins -l

Activating a Plugin

auditd-plugins -a my-plugin

Configuring a Plugin

auditd-plugins -c my-plugin -o /path/to/config.txt

Testing a Plugin

auditd-plugins -t my-plugin

Common Issues

Plugin Loading Errors

Check if the auditd-plugins package is installed. Ensure that the plugin is compatible with the current auditd version.


auditd-plugins can be used with the following commands:

  • auditctl: To configure audit rules
  • aureport: To generate audit reports

Related Commands

  • auditd: The main auditd daemon
  • auditctl: Configures audit rules
  • ausearch: Searches audit logs
  • aureport: Generates audit reports