audit trail directory

[Damián Sarmiento]

Hi all.

I´m using HP-UX B.11.31 U ia64 and I use the auditing tool to monitor my server.
In my auditing file [/etc/rc.config.d/auditing]
I have the path specified as /tmp/audit/.trail1 but when I start the auditing tool the system displays:
warning: audit trail directory /tmp/audit/.trail1.20100427_1539 doesn't exist
created audit trail directory: /tmp/audit/.trail1.20100427_1539
The .trail1 directory exists in the specified path and I don´t know why the system creates another directory.

The number after .trail. [20100427_1539] changes according with the date and time in my server.

The problem is every period of time the system creates a new .trail directory.

Can anybody help me, please?

Thanks.

DASM.

[Steven E. Protter]

Shalom DASM,

/etc/rc.config.d/auditing

That is a configuration file.

There may be a mistake in there, or the tool may just drop a number in there because more than one auditing file can be generated on any given day.

SEP

[Damián Sarmiento]

Hi Steven.
Thanks to response.

You´re right. That is a configuration file.
I only change the PRI_AUDFILE path.
Also I commented the SEC_AUDFILE to see if that was the problem but it´s not.

Here is the auditing file.

Thanks.

DASM