Operating System - OpenVMS
cancel
Showing results for 
Search instead for 
Did you mean: 

Resizing of the Security.Audit$journal file

 
Peter H. Mudd
Occasional Visitor

Resizing of the Security.Audit$journal file

Need to move Security.audit$journal to another drive and also resize the audit file.
3 REPLIES 3
Steven Schweda
Honored Contributor

Re: Resizing of the Security.Audit$journal file

Resize? You can use a command like
ANAL /AUDI /BINA /SINC = sometime -
/OUTP = somewhere
to strip out old data.

HELP SET AUDI /DEST may tell you more about
specifying the location of the file.

This also mentions SET AUDIT /SERVER=NEW_LOG,
which effectively resizes the (new) file (to
zero, because it's new).

Depending on what you really wish to do, you
may want to disable the audit server
(briefly) while you're fooling around with
its log file.
Steven Schweda
Honored Contributor

Re: Resizing of the Security.Audit$journal file

> [...] to another drive [...]

See also SYS$MANAGER:SYSECURITY.COM.
Jim_McKinney
Honored Contributor

Re: Resizing of the Security.Audit$journal file

Regarding the initial size of the audit journal file, see

$ HELP SET AUDIT/SERVER

and observe what it says about the NEW_LOG keyword as the new size is dependent upon the old size (in an effort to be efficient).

NEW_LOG Creates a new clusterwide audit log file.
Typically, this is used daily to generate a
new version of the audit log file.

The following sequence of commands can be used
to reset the space monitoring thresholds and
then to recreate the auditing log, thereby
creating a smaller log file:

$ SET AUDIT /JOURNAL=SECURITY
/THRESHOLD=WARN=200
$ SET AUDIT /SERVER=NEW_LOG

By default, the size of the new auditing log
file is based on the size of the previous
auditing logs.

For help with the designating a non-default location for the file see

$ HELP SET AUDIT/JOURNAL