Operating System - OpenVMS
cancel
Showing results for 
Search instead for 
Did you mean: 

audit server - security.audit$journal file size

 
Don Lennert
Occasional Contributor

audit server - security.audit$journal file size

I am trying to create a smaller security.audit$journal file. It seems the default allocation size is almost 4.9 million blocks. I've looked over several articles about starting a new_log but they say the default is based on the size of previous logs. So I thought I'd just stop the audit server, rename the audit$journal file, move it to another drive, delete the renamed version, then start the audit server again. The newly created file was only slightly smaller than the original file. Any thoughts on how to create this file at about 1/3 to 1/2 its current size?
Thanks for any help you can provide.
3 REPLIES 3
Jim_McKinney
Honored Contributor

Re: audit server - security.audit$journal file size

Try the following (replace the 10000 with whatever size you'd like the file to start at - you might as well start with a value near as large as you expect it to get before you next roll it).

$ SET AUDIT /JOURNAL=SECURITY /THRESHOLD=WARN=10000
$ SET AUDIT /SERVER=NEW_LOG
Wim Van den Wyngaert
Honored Contributor

Re: audit server - security.audit$journal file size

Try stop audit, delete sys$manager:vms$audit_server.dat, start audit again, do settings of set audit again.

It must keep the size somewhere so it should be in that file. But note that all your settings of audit are lost !

Wim
Wim
Wim Van den Wyngaert
Honored Contributor

Re: audit server - security.audit$journal file size

Tested it on a 7.3 cluster and it work. The file is now very small.

Wim
Wim