- Community Home
- >
- Servers and Operating Systems
- >
- Operating System - HP-UX
- >
- System Administration
- >
- View the su logs
-
-
Forums
- Products
- Servers and Operating Systems
- Storage
- Software
- Services
- HPE GreenLake
- Company
- Events
- Webinars
- Partner Solutions and Certifications
- Local Language
- China - 简体中文
- Japan - 日本語
- Korea - 한국어
- Taiwan - 繁體中文
-
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
- HPE Blog, Austria, Germany & Switzerland
- Blog HPE, France
- HPE Blog, Italy
- HPE Blog, Japan
- HPE Blog, Middle East
- HPE Blog, Latin America
- HPE Blog, Russia
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
- HPE Blog, Poland
-
Blogs
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Blog, Latin America
- HPE Blog, Middle East
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
-
Information
- Community
- Welcome
- Getting Started
- FAQ
- Ranking Overview
- Rules of Participation
- Tips and Tricks
- Resources
- Announcements
- Email us
- Feedback
- Information Libraries
- Integrated Systems
- Networking
- Servers
- Storage
- Other HPE Sites
- Support Center
- Aruba Airheads Community
- Enterprise.nxt
- HPE Dev Community
- Cloud28+ Community
- Marketplace
-
Forums
-
Forums
-
Blogs
-
Information
-
English
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
01-19-2011 08:15 AM
01-19-2011 08:15 AM
Thanks John
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
01-19-2011 08:19 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
01-19-2011 08:32 AM - last edited on 11-10-2011 08:49 AM by Kevin_Paul
01-19-2011 08:32 AM - last edited on 11-10-2011 08:49 AM by Kevin_Paul
Re: View the su logs
yes all logs are @ '/var/adm/sulog '
Could set up a cron job to check sulog periodically and report any failed attempts to su to root (indicated by - instead of +). This is pretty crude example, but should give you the general idea of what needs to be done.
#!/usr/bin/sh
grep "root$" /var/adm/sulog | grep " - " | mailx -s "Failed root su attempts" someone@somewhere.com
http://h30499.www3.hp.com/t5/Security/How-to-log-failed-attempts-to-ROOT/m-p/3699147#M11226
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
01-19-2011 10:16 AM
01-19-2011 10:16 AM
Re: View the su logs
My sulog appears to only retain for specified period. It is cleared upon reboot and a OLDsulog file is created for the previous day. Both files only contain a 24 hour period. In order to keep a copy of all my su activity I was going to run a cron job. In Solaris cron -e edit the cron file but in HP-UX is it crontab -e? If yes are cron jobs setup pretty much the same; that is specify the time/date and file to execute?My script will create a directory with the date of the system clock, so I will need to figure out how to to this.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
01-19-2011 10:23 AM
01-19-2011 10:23 AM
Re: View the su logs
http://docs.hp.com/en/B2355-90128/crontab.1.html
crontab -e
Edit a copy of your crontab file, or create an empty file to edit if the crontab file does not exist.
crontab -l
List your crontab file.
The entries in a crontab file are lines of six fields each. The fields are separated by spaces or tabs. The lines have the following format:
minute hour monthday month weekday command
example,
0 0 1,15 * 1 command
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
01-19-2011 10:34 AM
01-19-2011 10:34 AM
Re: View the su logs
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
01-19-2011 10:39 AM
01-19-2011 10:39 AM
Re: View the su logs
Manix
Hewlett Packard Enterprise International
- Communities
- HPE Blogs and Forum
© Copyright 2022 Hewlett Packard Enterprise Development LP