Fujitsu SPARC Enterprise M4000 User Manual page 118

Audit Administration Terms (Continued)
TABLE 2-12
Term Description
Audit trail Set of audit files. The user refers to an audit trail to analyze the information contained
in it.
Audit policy Audit settings. The audit policy mainly defines whether auditing is enabled or
disabled and the management method when audit trail becomes full.
Audit token One field in an audit record. An audit token contains an audit event attribute, such as
"user" or "privilege".
TABLE 2-13
Audit Administration
TABLE 2-13
Item Description
Display audit Displays audit settings.
setting
Information on whether access audit is enabled
information
or disabled and the Audit policy is displayed.
Enable/ Sets a value for an audit setting.
disable audit,
Specify the following types of audit trail
audit policy
administration information:
• Enable/disable auditing (Note 1)
• Request the log archive (Note 1)
• Data deletion
Also, specify the audit policy as follows:
• Enable or disable auditing for the specified
user only or for global policy. (Note 2)
• Enable or disable an audit class.
• Enable of disable an audit event.
• Enable or disable auditing for all users
(global policy).
• Specify the destination address for the mail
sent when usage of the local audit file
reaches the threshold.
• Specify the write suspend/count applied
when an audit trail becomes full. (Note 3)
• Specify the local audit file usage threshold
(%) that triggers an alarm when reached.
(Note 4)
2-62 SPARC Enterprise Mx000 Servers XSCF User's Guide • April 2008
lists the setting items and the corresponding shell commands.
Shell
Command Remarks
showaudit
• Specify values for "User,"
setaudit
"Audit Class," and "Audit
Event" by delimiting them
with the comma in a shell
command.
• Each mail address must
consist of up to 64
characters in the "@up to 64
characters" format. If the
receiving address has a
restriction, check the
settings.
• The default write mode
when an audit trail becomes
full is "count."
• The shell command can set
a maximum of four warning
thresholds delimited by the
comma. The default
warning threshold is 80 (%).