topic Re: /.secure/etc/auditfile in Operating System - HP-UX

/.secure/etc/auditfile

Crystal_1 — Wed, 20 Aug 2003 13:13:34 GMT

Hi,

I am using the default settings pertaining to the Audit Log Files.

/.secure/etc/auditfile1
/.secure/etc/auditfile2
AFS=1000KB
FSS=20%
Start sending warning message when log reaches 90%

Since these settings can prevent logs from increasing, why Unix Admin said the log file will fill up the file system?

Thanks,

Re: /.secure/etc/auditfile

Darren Prior — Wed, 20 Aug 2003 13:19:20 GMT

Hi,

Have a read of this recent thread for some further info on this subject:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x912b113e350f0741b44d77fb6d682efc,00.html

In a nutshell, unless you run audsys after the first file has switched to the second file you will fill up the file system with the second file.

regards,

Darren.