Fujitsu SPARC Enterprise M3000 Xscf Reference Manual page 175

OPERANDS The following operands are supported:
archive
delete
disable
enable
EXAMPLES
EXAMPLE 1
XSCF>
Auditing for LOGIN and AUDIT classes has been disabled. Auditing for READ class
is enabled.
EXAMPLE 2
XSCF>
Auditing for classes 8 (LOGIN) and 16 (AUDIT) has been disabled. Auditing for class
1 (SYSTEM) is enabled.
EXAMPLE 3
XSCF>
Auditing is enabled for all of Class 1 (SYSTEM) except for event 64 (USER) is
disabled.
EXAMPLE 4
XSCF>
Turns on writing of the audit records for the audit trail.
EXAMPLE 5
XSCF>
Notifies the log archiving facility to archive the current audit trail.
Delete the portion of the local audit trail in the secondary
partition. This can be used to free space for new audit records if
the local audit trail becomes full. For more information on the
secondary partition, refer to the Administration Guide for your
server.
Turns off the writing of audit records to the audit trail and
notifies the log archiving facility to archive the current audit trail.
Turns on the writing of audit records to the audit trail.
Changing Classes Using Names
setaudit -c LOGIN,AUDIT=disable -c ACS_READ=enable
Changing Classes Using Numbers
setaudit -c 8,16=disable -c 1=enable
Changing Classes and Enabling an Event
setaudit -c 1=enable -e 64=disable
Enabling Auditing
setaudit enable
Enabling Warnings
setaudit -t 50,75
setaudit(8)
System Administration 153