audispd is an audit event multiplexor. … It takes audit events and distributes them to child programs that want to analyze events in realtime. When the audit daemon receives a SIGTERM or SIGHUP, it passes that signal to the dispatcher, too. The dispatcher in turn passes those signals to its child processes.

What is Audispd log?

audispd. The audit dispatcher daemon ( audispd ) can be used to relay event notifications to other applications instead of (or in addition to) writing them to disk in the audit log.

How do I stop var log messages in Linux?

In this area, add ;local0. none to the /var/log/messages line like below. Restart syslog and auditd and audit will stop sending logs to the messages log. Hope this helps.