# /etc/audisp/audispd.conf q_depth = 150 overflow_action = syslog priority_boost = 4 max_restarts = 10 name_format = hostname