I upgraded Open-Audit Community from 1.4.1 to 1.5.3.
After upgraded, discovery Linux hosts got error " M:Invalid XML audit result for myhost".
At 1.4.1, it works fine on the same host "myhost".
Please help me.
This was an issue found in Open-AudIT 1.5.3 which we have now fixed in our 1.6.2 release.
The associated ticket is OA-220 which provides details of the fix.
The issue is that on some RedHat (and CentOS) installs, the package URL contains an & character.
If you change line 1762 of audit_linux.sh
> sed -e 's/\&.*</</' >> "$xml_file"
sed -e 's/\&.*]]/]]/' >> "$xml_file"
the issue is resolved.