writing audit log to a file

[Elena Leontieva]

Hello,

I extracted the audit log file by running the command:

audisp /audpri/audfile1 > /tmp/log_output

The size of the audfile1 is about 500MB, but the log_output got much bigger and I actually had to kill the audisp process.

coci161(root):/tmp > ll /audpri
total 1015382
-rw------- 1 root sys 519867268 Jul 31 18:35 audfile1
drwxr-xr-x 2 root root 96 May 14 16:02 lost+found
coci161(root):/tmp >

coci161(root):/tmp > ll /tmp |grep log_output
-rw-r----- 1 root sys 3455074304 Aug 15 15:41 log_output
coci161(root):/tmp >

When I try to "write to a file" from SAM I had the same issue, - the log_output kept growing ...

I did extracts before without problems.

Please, help.

Thanks,
Elena.