onstat very slow after starting auditing
Posted in 2012
Topics: Security, Permissions & Auditing
I have started Informix auditing and have configured it for the minimum (only
checking CLDB,CRDB,DRDB,OPDB) for each user (except informix and users I know
are access the DBs) in /etc/passwd. After starting auditing, I am experiencing
very slow response from any onstat command.
I am running IDS 11.50.FC8 on SunOS.
As soon as I turn auditing off, the onstat command runs fine. Is there any
parameter which I need to tune before I start auditing?
Thanks in advance.
Nitin
It does ring some bell.... But I think I never identified the issue... And
I wouldn't expect it in recent versions (like yours).
Can you quantify what is "slow"?
Can you also tell us the audit level you choose?
Do your calls to onstat show up on the audit logs? If yes, can you send a
few lines? (I'm interested to see if the hostname appears as a name or an
IP address)
Thanks
On Wed, Jun 13, 2012 at 2:10 PM, NITIN MATHUR
<nitin_maths@rediffmail.com>wrote:
> I have started Informix auditing and have configured it for the minimum
> (only
> checking CLDB,CRDB,DRDB,OPDB) for each user (except informix and users I
> know
> are access the DBs) in /etc/passwd. After starting auditing, I am
> experiencing
> very slow response from any onstat command.
>
> I am running IDS 11.50.FC8 on SunOS.
>
> As soon as I turn auditing off, the onstat command runs fine. Is there any
> parameter which I need to tune before I start auditing?
>
> Thanks in advance.
>
> Nitin
>
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
--
Fernando Nunes
Portugal
http://informix-technology.blogspot.com
My email works... but I don't check it frequently...
--00248c7118051ec66904c25b2247
Thanks Fernando for the reply.
Before I started auditing, whenever I used to run any onstat command, I used
to get the output instantaneously but as soon as I start auditing and run any
onstat command, it takes 3-4 seconds for the output to appear on screen. When
I turn auditing off, the issue is resolved.
Since I am not auditing the informix user and have created masks for all users
in /etc/passwd for CLDB,CRDB,DRDB,OPDB events.
Thanks.
Nitin