Operating System - HP-UX
1752739 Members
5716 Online
108789 Solutions
New Discussion юеВ

enabling audit trail for HPUX 11.31

 
texchem
Occasional Contributor

enabling audit trail for HPUX 11.31

hi, im new to tHPUX and i been requested to set the audit trail in my server to audit all folder/file creation,deletion and modification by all users. How do i do it in step by step. Please assist urgently..Thanks

4 REPLIES 4
Emil Velez_2
Trusted Contributor

Re: enabling audit trail for HPUX 11.31

the easiest way is to go imto the system management homepage, select auditing, urn it on and select the events (which are groups of system calls) you want audited. you can specify where the auditing files exist and review the logs in the gui
Emil Velez
Instructor Storage, Servers, HP-UX and Partner Courses
Hewlett Packard Enterprise Education Services
Ask me about training on StoreServ (3PAR) StoreOnce, StoreEasy, StoreAll, StoreVirtual, HP-UX, ServiceGuard and HPE Partner Ready Certification Training

internet: Linkedin: http://www.linkedin.com/in/emilvelez

HPE Master ASE Server Solutions Architect V3
HPE Master ASE Storage Solutions Architect V2
HP UNIX Certified (ASE HPUX 11iv3 Administration V1)
Certified HPE Instructor
HPE Product Certified - OneView [2016]
HP Sales Certified -Servers, Converged Systems and Services [2015]
HPE Product Certified - Converged Solutions [2017]
texchem
Occasional Contributor

Re: enabling audit trail for HPUX 11.31

Hi Emil,

 

Thanks for the suggestion.I was thinking of doing the same thing since the command activation abit confusing. Thanks for your help. Just one more question,Will it crash or reboot the HPUX server by turning this auditing ON.?

Dennis Handly
Acclaimed Contributor

Re: enabling audit trail for HP-UX 11.31

>Will it crash

 

Be careful you have enough space in the target filesystem for your logs.

texchem
Occasional Contributor

Re: enabling audit trail for HP-UX 11.31

Well noted.. I have configured the audit trail but i have problem to view the previous log details as it only show the current. How do i view the old logs. any command for that