Changing the Audit Configuration: |--+-----------------+--+-----------------+---------------------> '- -l--audit mode-' '- -e--error mode-' >--+---------------+--+--------------+--------------------------| '- -p--auditdir-' '- -s--maxsize-'
| Element | Purpose | Key Considerations |
|---|---|---|
| -e error mode | Specifies the error-handling method for auditing when a record cannot be written to the audit file or event log. | Restrictions:
The error mode parameter can have one of
the following values: 0, 1, 3.
Additional Information: This option pertains to the value set for the ADTERR configuration parameter in the ADTCFG file. The value can be changed only when auditing is on. For details of the valid error mode values, see Using the -e Option. |
| -l audit mode | Specifies the audit mode. | Restrictions: The audit mode parameter
can have one of the following values on UNIX: 0, 1, 2, 3, 4, 5, 6, 7, 8.
The audit mode parameter can have one of the following values on Windows: 0, 1, 3, 5, 7. Additional Information: This option pertains to the value set for the ADTMODE configuration parameter in the ADTCFG file. For details of the valid audit mode values, see Using the -l Option. |
| -p auditdir | Specifies the directory in which the database server creates audit files. | Restrictions: You
can change the auditdir value only for database server-managed
auditing and only when auditing is in effect.
Additional Information: This option pertains to the value set for the ADTPATH configuration parameter in the ADTCFG file. The change occurs with the next write attempt. The database server starts a new audit file in the new directory, beginning with the first available number that is equal to or greater than 0. |
| -s maxsize | Specifies the maximum size (in bytes) of an audit file. | Restrictions: The maxsize can
be any value between 10,240 bytes and approximately 2 gigabytes
(the maximum value of a 32-bit integer). If you specify a size that
is less than the minimum, it will be set automatically at the minimum.
You can specify the maxsize value only for
database server-managed auditing and only when auditing is in effect.
Additional Information: This option pertains to the value set for the ADTSIZE configuration parameter in the ADTCFG file. When an audit file reaches or exceeds maxsize, the database server closes the current file and starts a new audit file. |
For information on the audit configuration parameters in the ADTCFG file, see Appendix B. The ADTCFG File.
Changes made to the audit configuration with onaudit take effect immediately for all user sessions, including existing sessions. For information on how audit-configuration changes interact with the ADTCFG file, see Overview of Auditing.
This section discusses the values that you can enter for the -e error mode option of onaudit.
To specify continue mode, enter 0 as the argument to the -e option. In continue mode, the database server continues processing the thread and notes the error in the message log. Errors for subsequent attempts to write to the audit file are also sent to the message log. For information about the message log, see your IBM Informix: Administrator's Guide.
To specify one of the halt modes, which suspend processing or shut the database server down, enter one of the following arguments to the -e option:
This section discusses the values that you can enter for the -l audit mode option of onaudit.
The value 0 turns off auditing. The database server stops auditing for all existing sessions, and new sessions are not audited.
The other values all turn on auditing, as follows: