DOC HOME SITE MAP MAN PAGES GNU INFO SEARCH PRINT BOOK
 
Configuring auditing

Displaying auditing subsystem settings

The auditlog command, when invoked with no options, will display the following auditing information:

The following example illustrates the output of auditlog:
   # auditlog
   Current Status of Auditing:	ON
   Current Event Log:	/var/audit/0415477
   Current Audit Buffer High Water Mark:	20480 bytes
   Current Maximum File Size Setting:	1000 blocks
   Action To Be Taken Upon Full Event Log:	log switch
   Action To Be Taken Upon Error:	disable
   Next Event Log To Be Used:	/var/audit/MMDD###
   Program To Be Run When Event Log Is Full:	/etc/security/audit/alog.sh




The first line of the output reports the status of auditing; it will be either ON or OFF. If auditing is on, the rest of the display reports the current audit settings. If auditing is off, the display reports the settings that will take effect when auditing is enabled next.
Next topic: Setting audit criteria with the auditset command
Previous topic: Specifying an alternate log file

© 2005 The SCO Group, Inc. All rights reserved.
SCO OpenServer Release 6.0.0 -- 03 June 2005