HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Looking for a better auditing solution

 
SOLVED
Go to solution
Paul Maglinger
Regular Advisor

Looking for a better auditing solution

Running HP-UX 11.23. Some servers are ServiceGuard clustered, some are not. Some servers using NIS for authentication, some not. I'm looking for a solution that will quite simply tell me when a file was modified, when, what file, by who, and put it in log file. If it could send a notification, that would icing on the cake. HP-UX auditing output seems too cryptic, plus it has a problem with NIS. Many references to auditing in the forums go to dead links. Alot of threads are just dead-ends. Does someone have a recommendation, HP or otherwise, that is better than the auditing supplied with HP-UX?
3 REPLIES
Solution

Re: Looking for a better auditing solution

Paul,

I guess the most welll known 3rd party solution in this space is Tripwire.

It's available as an open source product (compile yourself as far as I know, unless there are binaries out there somewhere):

http://sourceforge.net/projects/tripwire/

Or as a commercial product:

http://www.tripwire.com

HTH

Duncan

HTH

Duncan

Re: Looking for a better auditing solution

Didn't look hard enough!

There is a compiled version of Tripwire available in the HP-UX Internet Express Bundle here:

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1123

HTH

Duncan

HTH

Duncan
Paul Maglinger
Regular Advisor

Re: Looking for a better auditing solution

Open Source Tripwire seems to be the solution here. I was disappointed in HP's Internet Express version. It apparently didn't install all the components it needed. The Open Source version needed some tweaking and did have to be compiled, but it is working. Thanks!