Fujitsu SPARC Enterprise M3000 Xscf Reference Manual page 186

setaudit(8)
OPERANDS
EXAMPLES
172 SPARC Enterprise Mx000 Servers XSCF Reference Manual • Last Revised October 2010
-p suspend|count
Sets the policy to follow when the audit trail becomes full. The following are
valid values:
suspend
count
-t percents
Sets thresholds at which to issue a warning about local audit storage usage.
percents is a comma-separated list of percentages of available space used. At
most four values may be set. For example, values of 50, 75, 80, 90 would
cause warnings to be issued when 50%, 75%, 80% and 90% respectively, of
the available storage for audit records is consumed. The default value is 80%.
Warnings are issued as a message to the console and optionally to an
administrator using email. See -m mailaddr.
The following operands are supported:
Notifies the log archiving facility to archive the current audit
archive
trail.
Deletes audit trail data from the older audit log partition and
delete
makes it the current partition. delete can be used to free space
for new audit records if the local audit trail becomes full. Space
in the partitions is automatically cleared as needed when logs are
archived. The operation is only necessary if audit policy or
network problems prevent archiving of audit logs.
Note - Executing setaudit delete a second time deletes data from the
newer audit log partition, leaving no audit trail data.
For more information on managing audit logs see the SPARC
Enterprise M3000/M4000/M5000/M8000/M9000 Servers
Administration Guide.
Turns off the writing of audit records to the audit trail and
disable
notifies the log archiving facility to archive the current audit
trail.
Turns on the writing of audit records to the audit trail.
enable
Changing Classes Using Names
EXAMPLE 1
XSCF> setaudit -c LOGIN,AUDIT=disable -c ACS_READ=enable
All processes which try to write to audit records will be
suspended until either space becomes available and
records can be written, or the policy is changed to count.
New audit records are dropped and a count is kept of
how many records are dropped.