Audit trails are starting to become a major concern for my company. Is there a tool to centrally log all user shell activity across multiple servers? This was something FreeIPA should have covered, but it is currently on the roadmap for future releases.
A common tool mentioned in my searches is psacct. If this is the best tool, how would I get say 30 servers to log to one server? And how bad would the performance impact be?
[link][37 comments]