Sun Microsystems Sun SPARC Enterprise M5000 - Audit File Tools; XSCF Shell Procedures for Auditing; To Enable or Disable Writing of Audit Records to the Audit Trail; To Configure an Auditing Policy

74 SPARC Enterprise Mx000 Servers Administration Guide • August 2009
Audit File Tools
You can manage audit files from the Service Processor, using a tool for viewing audit
files. See the viewaudit(8) man page for details on this tool.
XSCF Shell Procedures for Auditing
This section describes these tasks:
■ To Enable or Disable Writing of Audit Records to the Audit Trail
■ To Configure an Auditing Policy
■ To Display Whether Auditing is Enabled Or Disabled
■ To Display Current Auditing Policy, Classes, or Events
▼ To Enable or Disable Writing of Audit Records
to the Audit Trail
1. Log in to the XSCF console with auditadm privileges.
2. Type the setaudit command:
where enable enables writing of audit records, and disable disables writing of
audit records.
▼ To Configure an Auditing Policy
1. Log in to the XSCF console with auditadm privileges.
2. Type the setaudit command:
See the setaudit(8) man page for details on option information.
XSCF> setaudit enable|disable
XSCF> setaudit [-p count|suspend][-m mailaddr][-a users=
enable|disable|default][-c classes={enable|disable}][-e events=
enable|disable][-g {enable|disable}][-t percents]