== Auditd module

This module collects and parses logs from the audit daemon (`auditd`).

[float]
=== Compatibility

This module was tested with logs from `auditd` on OSes like CentOS 6 and
CentOS 7.

This module is not available for Windows.

[float]
=== Dashboard

This module comes with a sample dashboard showing an overview of the audit log
data. You can build more specific dashboards that are tailored to the audit
rules that you use on your systems.

image::./images/kibana-audit-auditd.png[]

[float]
=== Syslog fileset settings

[float]
==== var.paths

An array of paths where to look for the log files. If left empty, Filebeat
will choose the paths depending on your operating systems.
