one possible option would be to store the logs of each user in a file with the users name, instead of outputting them to the syslog. ie. in /var/log you could make another dir called storage or snoopy or something and in there would be files with the various users names and in each file would be that users logs.
That would be good but wouldnt be a problem when you forward the syslog logs to a remote host where snoopy isnt installed?
Log in to post a comment.