Disable SMG-style screen scrolling for ANALYZE/AUDIT

[Galen Tackett]

Is there some way to keep the Audit Analysis utility from scrolling things off the display when you just do a simple command like this?

$ ANALYZE/AUDIT SYS$MANAGER:

Otherwise the output can appear (and scroll away) so quickly that it's lost, i.e., it's not possible to use the scroll bar to look at what's scrolled off the screen.

The author of DFU kindly supplied us with the DFU$NOSMG logical to prevent just this sort of thing when using that utility. Maybe there's some obscure or undocumented logical to do this for ANALYZE/AUDIT??

[Volker Halle]

Galen,

how about the /PAUSE=seconds qualifier ? The default is 3 seconds, but you can specify much larger values.

Volker.

[Volker Halle]

/PAUSE only works with /FULL - so no help in this case.

Volker.

[Volker Halle]

Galen,

how about this:

$ pipe anal/audit SYS$MANAGER:SECURITY.AUDIT$JOURNAL | type/page sys$pipe

Volker.

[Ian Miller.]

$ SET TERMINAL/DEVICE_TYPE=LA75

[Galen Tackett]

Volker and Ian,

Volker's last suggestion about using TYPE/PAGE=SAVE is useful, and Ian's about SET TERM/LA75 a little less so :-)

I'm trying to make things easy for a new-to-VMS security officer to do simple audits. A bit of DCL could do the trick to keep them from having to type the whole PIPE sequence. Though he's unix-savvy and gets the concept, I'd like to make it easier for him.

* Side note for HP VMS folks: *
It would sure be nice if there were a /NOSMG qualifier or else a /PAGE=SAVE qualifier like the one available with TYPE.

The same issue exists for LATCP though I don't use it and suspect it's not a big enough issue for anyone at HP worry about either

[Jan van den Ende]

Galen,

looks lke a nice one for HP Advocacy.
It has irritated me just enough that I can promise you my vote!

Proost.

Have one on me.

jpe

[Wim Van den Wyngaert]

Off subject but I use /noint to avoid the autoshow. I dump it to a file when I need to inspect lots of records and edit/search the file.

Wim

[Zeni B. Schleter]

I find the /BRIEF too brief and the /FULL too full for general reviewing. We create daily reports.

But for simplicity, you can set the Pipe statement (given by Volker Halle) into a symbol in the login script. But you may also need to use /Since= so that it does not always display to the beginning of the file.

[Doug_81]

You can always direct the output to a file and type it.
e.g.
$ ANALYZE/AUDIT SYS$MANAGER:/output=d.d

or create a commandfile to do this for you.
Something like:

$ ANALYZE/AUDIT SYS$MANAGER:/output=d.d
$ type/page/save d.d
$ delete d.d;

Doug

[Steven Schweda]

I find the normal output from ANAL /AUDI /FULL
sufficiently annoying that my usual procedure
is to hit CTRL/Z as soon as it says anything
(other than "End Of File for input reached.").
Then I re-run the command with a /OUTP = file
qualifier, and use an editor to look at that
file.

I'm normally looking for the (roughly) daily
SSH break-in attempts, and these typically
run more than 1000 lines, so a real editor is
more useful to me than any tool with more
limited capability.

[Galen Tackett]

For my particular purpose the following was probably the best answer:

$ PIPE ANALYZE/AUDIT | TYPE/PAGE=SAVE SYS$INPUT

But I still think it would be good for utilities that use this SMG-like scrolling to provide a way to disable it.