Operating System - HP-UX
1827424 Members
3842 Online
109965 Solutions
New Discussion

How can I send audit logging to syslog.log?

 
Paul F. Bennett
Advisor

How can I send audit logging to syslog.log?

I have auditing setup on a 11.23 server and it send logs to a file it is working fine but I would now like to send audit logging to syslog.log. I believe I can place an entry in syslog.conf but I'm not sure of the syntax

1 REPLY 1
Bill Hassell
Honored Contributor

Re: How can I send audit logging to syslog.log?

Auditing can be a very intensive activity which is why the audit log is actually two different logs to try to prevent locking up processes waiting for the audit records to be written. The syslog daemon is far too slow to handle the auditing system. And these log files can grow very rapidly (gigabytes) if too much detail is requested for the auditing. That's why it is imperative to move the (awful) default location for audit files.



Bill Hassell, sysadmin