sudo log parsing support for Linux
puffyCid opened this issue · comments
What new feature do you think would be cool to add to artemis?
Support parsing sudo logs on Linux systems.
Describe the solution you'd like
Sudo logs can show commands and activity executed with root privileges. Having visibility into this activity would be very useful
Additional context
The logs are in a Journal file format on systems with systemD. So we will need to either parse the Journal format or use a third-party crate
https://wiki.archlinux.org/title/Systemd/Journal
https://systemd.io/JOURNAL_FILE_FORMAT/