topic Auditing - log file problem? in Operating System - HP-UX

Auditing - log file problem?

Eric Yruegas — Wed, 09 Jun 2004 08:27:13 GMT

I've done several searches and haven't seen my particular issue addressed - so here goes...

I'm enabling auditing on a sandbox machine, in preparation for pushing out a standard audit configuration to the rest of my environment. When I look at the logs (see attached sample), the 'User=' field is all question marks, except for root entries.

Machine is HPUX11i, with Dec_2003 GOLDPK bundle installed.

Any ideas? Shouldn't the User reflect the user performing the action?

Thanks in advance-
-E

Re: Auditing - log file problem?

Manish Srivastava — Wed, 09 Jun 2004 09:05:47 GMT

Hi,

I dont know whether this will work, it did for me once. Start a session and enable auditing, start a new session and try executing the jobs that log auditing messages. It should work.

manish

Re: Auditing - log file problem?

Eric Yruegas — Thu, 10 Jun 2004 12:51:03 GMT

I ended up opening a case - and apparently this is a problem in 11.11 - fixed in 11.23. Support is in process of finding workaround or other resolution.

So woe is me for the time being... all this auditing and nobody to trace the activity to... ha!