topic Re: audit trail directory in Operating System - HP-UX

audit trail directory

Damián Sarmiento — Wed, 28 Apr 2010 17:41:36 GMT

Hi all.

I´m using HP-UX B.11.31 U ia64 and I use the auditing tool to monitor my server.
In my auditing file [/etc/rc.config.d/auditing]
I have the path specified as /tmp/audit/.trail1 but when I start the auditing tool the system displays:
warning: audit trail directory /tmp/audit/.trail1.20100427_1539 doesn't exist
created audit trail directory: /tmp/audit/.trail1.20100427_1539
The .trail1 directory exists in the specified path and I don´t know why the system creates another directory.

The number after .trail. [20100427_1539] changes according with the date and time in my server.

The problem is every period of time the system creates a new .trail directory.

Can anybody help me, please?

Thanks.

DASM.

Re: audit trail directory

Steven E. Protter — Wed, 28 Apr 2010 17:55:54 GMT

Shalom DASM,

/etc/rc.config.d/auditing

That is a configuration file.

There may be a mistake in there, or the tool may just drop a number in there because more than one auditing file can be generated on any given day.

SEP

Re: audit trail directory

Damián Sarmiento — Wed, 28 Apr 2010 18:11:45 GMT

Hi Steven.
Thanks to response.

YouÂ´re right. That is a configuration file.
I only change the PRI_AUDFILE path.
Also I commented the SEC_AUDFILE to see if that was the problem but itÂ´s not.

Here is the auditing file.

Thanks.

DASM