![]() |
|
|
|
|
|||||||
| Forums | Portal | Register | Forum Rules | FAQ | Contribute | Members List | Arcade | Search | Today's Posts | Mark Forums Read |
| AIX AIX is IBM's industry-leading UNIX operating system that meets the demands of applications that businesses rely upon in today's marketplace. |
|
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| CEP Events this Summer 08 | iBot | Complex Event Processing RSS News | 0 | 06-03-2008 04:10 PM |
| Ignore events with syslogd | DukeNuke2 | SUN Solaris | 1 | 05-08-2008 06:08 AM |
| What’s coming in CEP: Modeling of Events? | iBot | Complex Event Processing RSS News | 0 | 01-25-2008 12:40 AM |
| Syslog events meanings | PVelazco | Security | 1 | 11-21-2007 05:50 AM |
|
|
Submit Tools | LinkBack | Thread Tools | Search this Thread | Display Modes |
|
#1
|
|||
|
|||
|
audit with streammode and userlogin events
Hi,
The audit default config has no "authentication" so I added it: General=USER_Login,USER_Logout,USER_SU,............. I reset the audit with "audit shutdown". There's no event recorded with it only all other events are recorder. I check the events for USER_Login/USER_Logout: . . . TCP_kreceive = printf "fd%d %s" * commands * tsm USER_Login = printf "user: %s tty: %s" PORT_Locked = printf "Port %s locked due to invalid login attempts" TERM_Logout = printf "%s" . . . * logout USER_Logout = printf "%s" . . . What do I need to reconfigure so that I could audit logon/logoff on my AIX. Thanks |
|||
| Google The UNIX and Linux Forums |
| Forum Sponsor | ||
|
|