{"description": "The setting for disk_full_action in /etc/audisp/audisp-remote.conf", "type": "string", "operator": "equals", "interactive": false, "options": {"default": "single", "exec": "exec", "halt": "halt", "single": "single", "suspend": "suspend", "syslog": "syslog", "warn_once": "warn_once", "stop": "stop"}, "warnings": [], "title": "Action for audispd to take when disk is full", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/auditing/configure_auditd_data_retention/var_audispd_disk_full_action.var"}