Require help on auditd command

[Anoopkumar]

Hi,
I am executing one script which in turns call another many scripts, I want to trace all sequences of calls in one log file. The o/s is hpux 11.11. I tried with command 'auditd' as follow:
1. Started /sbin/init.d/dce
2. Logged in as user "mped" and executed
auditd -t trace.log
The above commnand basically starts auditd daemon & should create trace.log under mped home directory to record traces of any execution of script or command in details. But in my case no log file is created and hence no recording.
The main goal is to trace the main script execution in detail. I tried with redirecting script like 2>&1 but it doesn't record in details.
If anybody working on auditd or similar to that then pl. help me.

Regards,
Mahadev

[Steven E. Protter]

Shalom Mahadev,

Best bet here is a common logfile set by a source file.

vi /etc/rc.config.d/scriptmaster
# my name do what you will

conents if scriptmaster

SCRIPT_LOG=/var/adm/scriptmaster.log


Modify the scripts to have this line in them.


. /etc/rc.config.d/scriptmaster

You now have a common repository for all log statements in the scripts.

SEP

[Anoopkumar]

Hi Steven,
No Luck, my script is perl based and it calls other scripts which can be binary format. I tried your method but didn't helped. Basically auditd does logging in detail, do you have other methods ?

regds,
Mahadev