Customizing Auditing

Customizing Auditing

When you have installed your system, you can select the level and type of auditing that you wish to use. The default auditing environment described above is created for you at installation time. For most purposes this auditing environment is satisfactory. However, remember that the System Audit Trail is completely configurable at any time through the sat_select and satconfig utilities. The satconfig utility is the preferred tool for use on graphics systems, since it provides a convenient graphical interface for switching each auditable event type on or off. The sat_select command is useful for server users and others who do not wish to use the satconfig utility. These utilities are discussed in detail in "Using satconfig" and "Using sat_select".

What Should I Audit?
Auditable Events
Using satconfig
Using sat_select
Saving and Retrieving Your Auditing Environment
Placing the Audit Files
How to Audit a Specific User
How to Audit a File
How to Audit a Label Under Trusted IRIX/B