Auditing - log file problem?

[Eric Yruegas]

I've done several searches and haven't seen my particular issue addressed - so here goes...

I'm enabling auditing on a sandbox machine, in preparation for pushing out a standard audit configuration to the rest of my environment. When I look at the logs (see attached sample), the 'User=' field is all question marks, except for root entries.

Machine is HPUX11i, with Dec_2003 GOLDPK bundle installed.

Any ideas? Shouldn't the User reflect the user performing the action?

Thanks in advance-
-E

[Manish Srivastava]

Hi,

I dont know whether this will work, it did for me once. Start a session and enable auditing, start a new session and try executing the jobs that log auditing messages. It should work.

manish

[Eric Yruegas]

I ended up opening a case - and apparently this is a problem in 11.11 - fixed in 11.23. Support is in process of finding workaround or other resolution.

So woe is me for the time being... all this auditing and nobody to trace the activity to... ha!