# ©AngelaMos | 2026 # auditd.conf log_file = /var/log/audit/audit.log max_log_file = 8 max_log_file_action = keep_logs