Audit Logs

Posted in 2008

Topics: Security, Permissions & Auditing, Platform-Specific Issues, Versions, Editions & End-of-Life

DAVE GRIFFEN — Tue, 09 Sep 2008 15:05:11 — source: IIUG Forums & Mailing Lists

I'm looking for a way to zip/compress my Informix audit logs automatically when they fill. Does the filling or switching of audit logs create an alarm event where this can be scripted? Thanks, Dave Griffen HP-UX 11.23 ia64 IDS 10.0 IDS 11.1

↪ replying to DAVE GRIFFEN

Fernando Nunes — Tue, 09 Sep 2008 16:30:02 — source: IIUG Forums & Mailing Lists

The change of audit log do not trigger any alarm event. As a side note, I'd like to see the alarm sub-system reviewed... You could do a periodic archive (hourly, daily...). Regards On Tue, Sep 9, 2008 at 4:05 PM, DAVE GRIFFEN <dgriffen@finishline.com>wrote: > I'm looking for a way to zip/compress my Informix audit logs automatically > when they fill. Does the filling or switching of audit logs create an alarm > event where this can be scripted? > > Thanks, > Dave Griffen > > HP-UX 11.23 ia64 > IDS 10.0 > IDS 11.1 > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently...

↪ replying to Fernando Nunes

rroussey@comcast.net — Tue, 09 Sep 2008 18:37:28 — source: IIUG Forums & Mailing Lists

If you have your own ALARM script, try trapping *all* alarms, including the 'message' ('info'?) type and just dumping the text to a file in /tmp. There *might* be a 'message' type that shows switching audit logs. -- Bob -------------- Original message -------------- From: "Fernando Nunes" <domusonline@gmail.com> > The change of audit log do not trigger any alarm event. > As a side note, I'd like to see the alarm sub-system reviewed... > You could do a periodic archive (hourly, daily...). > > Regards > > On Tue, Sep 9, 2008 at 4:05 PM, DAVE GRIFFEN wrote: > > > I'm looking for a way to zip/compress my Informix audit logs automatically > > when they fill. Does the filling or switching of audit logs create an alarm > > event where this can be scripted? > > > > Thanks, > > Dave Griffen > > > > HP-UX 11.23 ia64 > > IDS 10.0 > > IDS 11.1 > > > > > > > > > ******************************************************************************* > > Forum Note: Use "Reply" to post a response in the discussion forum. > > > > > > -- > -- > Fernando Nunes > Portugal > > http://informix-technology.blogspot.com > My email works... but I don't check it frequently... > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. >