Filter
Top Products
setaudit(8)
120 XSCF Reference Manual • Last Revised January 2007
OPERANDS The following operands are supported:
EXAMPLES
EXAMPLE 1 Changing Classes Using Names
EXAMPLE 2 Changing Classes Using Numbers
EXAMPLE 3 Disabling and Disabling Events
-t percents
Sets thresholds at which to issue a warning about local audit storage usage.
percents is a comma-separated list of percentages of available space used. At
most two values may be set. For example, a value of 50, 75 would cause
warnings to be issued when 50% and 75%, respectively, of the available
storage for audit records is consumed. The default value is 80%.
Warnings are issued as a message to the console and optionally to an
administrator using email. See -m mailaddr.
archive Notifies the log archiving facility to archive the current audit
trail.
delete Delete the portion of the local audit trail in the secondary
partition. This can be used to free space for new audit records if
the local audit trail becomes full. For more information on the
secondary partition, refer to the administration guide for your
server.
disable Turns off the writing of audit records to the audit trail and
notifies the log archiving facility to archive the current audit
trail.
enable Turns on the writing of audit records to the audit trail.
XSCF> setaudit -c LOGIN,AUDIT=disable -c ACS_CONFIG=enable
Auditing for LOGIN and AUDIT classes has been disabled.
Auditing for CONFIG class is enabled.
XSCF> setaudit -c 0,2=disable -c 1=enable
Auditing for classes 1 (LOGIN) and 3 (AUDIT) has been disabled.
Auditing for class 2 (CONFIG) is enabled.
XSCF> setaudit -e ENTER,EXIT,LOGIN_SSH=disable -e 5=enable
Auditing for Enter, Exit and Login_SSH events has been disabled. Auditing
for 5 (LOGOUT) is enabled.