---

Настройка /etc/audit/auditd.conf...
Копирование правил auditd из /home/snpp.ru/kileikinav/00-siem.rules
Отключение systemd-journald-audit.socket...
Job for auditd.service failed because the control process exited with error code.
See "systemctl status auditd.service" and "journalctl -xe" for details.


● auditd.service - Security Auditing Service
   Loaded: loaded (/lib/systemd/system/auditd.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Fri 2026-04-17 09:29:24 MSK; 2min 25s ago
     Docs: man:auditd(8)
           https://github.com/linux-audit/audit-documentation
  Process: 291635 ExecStart=/sbin/auditd (code=exited, status=6)
      CPU: 1ms

апр 17 09:29:24 uc-cons-a-04052.snpp.ru systemd[1]: Starting Security Auditing Service...
апр 17 09:29:24 uc-cons-a-04052.snpp.ru auditd[291635]: Error - space_left(0) must be larger than admin_space_left(0)
апр 17 09:29:24 uc-cons-a-04052.snpp.ru auditd[291635]: The audit daemon is exiting.
апр 17 09:29:24 uc-cons-a-04052.snpp.ru systemd[1]: auditd.service: Control process exited, code=exited, status=6/NOTCONFIGURED
апр 17 09:29:24 uc-cons-a-04052.snpp.ru systemd[1]: auditd.service: Failed with result 'exit-code'.
апр 17 09:29:24 uc-cons-a-04052.snpp.ru systemd[1]: Failed to start Security Auditing Service.
апр 17 09:29:24 uc-cons-a-04052.snpp.ru systemd[1]: auditd.service: Consumed 1ms CPU time.