Sponsored Content
Full Discussion: Security Audit Trail
Top Forums UNIX for Advanced & Expert Users Security Audit Trail Post 101195 by na100006 on Monday 6th of March 2006 05:49:15 AM
Old 03-06-2006
Security Audit Trail

Dear Experts,
I would like to know whether there are any tools available to view the Security Audit Trail files (SAT) in UNIX in a easier and customized way. If there is any similar type of S/W is available, please let me know.
Thanks,
Aswin
 

8 More Discussions You Might Find Interesting

1. Cybersecurity

Security & audit

I am new to the world of Unix. As part of my understanding to have a big picture of Unix, I need to understand: 1. How to review the existing unix system or audit for the settings? 2. How do I go about fixing the holes? (4 Replies)
Discussion started by: amundra
4 Replies

2. Shell Programming and Scripting

Is it possible to create audit trail on remote server using FTP

Hi, I'm automatically FTPing few files daily as a cron job to a remote server. I wanted to know if there is a way to log the successful transfer in a log on the remote server? The log on the remote server should look something like this. 10/30/2006 00:00:02 - File 1 transferred... (0 Replies)
Discussion started by: dayanand
0 Replies

3. UNIX for Dummies Questions & Answers

Audit Trail problems

I am trying to set up audit trail for our company server. (Mac OS X Server 10.3.9) We would like to record the activity of standard, non-administrative, users. We would like to record file creation, modification, deletion, among other things. We have installed the common criteria tools, but the... (3 Replies)
Discussion started by: iarnum
3 Replies

4. UNIX for Advanced & Expert Users

ssh trail

hi need you advise... in my company, we have to use mgmt server in order to access to other servers. so basically we need to login to our mgmt server (solaris) before we ssh to any other servers. my boss ask me to do some reporting on who access some "specific servers" by weekly. any idea how... (4 Replies)
Discussion started by: ashterix
4 Replies

5. UNIX for Dummies Questions & Answers

Security Audit logging

Hey, I was wondering if anyone knew of any good tools out there for collecting/viewing/sorting audit data from Solaris (10) and Linux (SUSE and RHE) platforms? I am required by some government standards to audit certain actions on these systems like login and logouts, file access and actions... (0 Replies)
Discussion started by: fearturtle03
0 Replies

6. Solaris

/etc/security/audit/SERVERNAME/files

What files are in this directory? Are they files that tell you what events have been performed on the system for the day? Also, I am searching in one of these files for a Permission Denied entry. How do I go about searching for this entry in these files if they are so huge and cannot display on my... (2 Replies)
Discussion started by: jastanle84
2 Replies

7. AIX

When AIX audit start, How to set the /audit/stream.out file size ?

Dear All When I start the AIX(6100-06)audit subsystem. the log will save in /audit/stream.out (or /audit/trail), but in default when /audit/stream.out to grow up to 150MB. It will replace the original /audit/stream.out (or /audit/trail). Then the /audit/stream.out become empty and... (2 Replies)
Discussion started by: nnnnnnine
2 Replies

8. UNIX for Dummies Questions & Answers

OS level audit trail for SSH?

Hi everyone, I have a situation where I need my personal account (say bob1) to login into a Red Hat 6 server, su to a system/application account (say app1) and kick off a script to do x,y and z. This isn't an issue. Now once I su- to the app1 account and kick-off the script this script then... (3 Replies)
Discussion started by: solomani
3 Replies
edit-pr(1)						       GNATS User Utilities							edit-pr(1)

NAME
edit-pr - edit a problem report in the GNATS database SYNOPSIS
edit-pr [ -h | --help ] [ -V | --version ] [ -d databasename | --database=databasename ] [ -H host | --host=host ] [ -P port | --port=port ] [ -v user | --user=user ] [ -w password | --passwd=password ] PR DESCRIPTION
edit-pr is used to make changes to existing PRs in a GNATS database. edit-pr first examines the PR and locks it if it is not already locked. This is to prevent a PR from being edited by two users simultane- ously. If the PR is already in the process of being edited, edit-pr displays the name of the person who owns the lock. edit-pr then calls $EDITOR on PR. After the PR has been edited, it is resubmitted to the database, and the index is updated. If you change a field that requires a reason for the change, edit-pr prompts you to supply a reason for the change. A message is then ap- pended to the Audit-Trail field of PR with the changed values and the change reason. Depending on how the database is configured, editing various fields in the PR may also cause mail to be sent concerning these changes. In the default configuration, any fields that generate Audit-Trail entries will cause a copy of the new Audit-Trail message to be sent. OPTIONS
-h, --help Prints a brief usage message for edit-pr. -V, --version Prints the version number for edit-pr. -d, --database Specifies the database containing the PR to be edited; if no database is specified, the database named default is assumed. This option overrides the database specified in the GNATSDB environment variable. GNATS network options: -H, --host Hostname of the GNATS server. -P, --port The port that the GNATS server runs on. -v, --username Username used to log into the GNATS server. -w, --passwd Password used to log into the GNATS server. ENVIRONMENT VARIABLES
The environment variable EDITOR specifies the editor to invoke on the PR. Default is vi(1). The GNATSDB environment variable is used to determine which database to use. For a local database, it contains the name of the database to access. For network access via gnatsd, it contains a colon-separated list of strings that describe the remote database, in the form server:port:databasename:username:password Any of the fields may be omitted, but at least one colon must appear; otherwise, the value is assumed to be the name of a local database. If GNATSDB is not set, it is assumed that the database is local and that its name is default. FILES
/tmp/ep$$ Temporary file for PR being edited. /tmp/ed_pr_ch$$ Holds Audit-Trail change message, if needed. /tmp/u$$ Holds output of lock function. SEE ALSO
Keeping Track: Managing Messages With GNATS (also installed as the GNU Info file gnats.info) databases(5), dbconfig(5), delete-pr(8), edit-pr(1) file-pr(8), gen-index(8), gnats(7), gnatsd(8), mkcat(8), mkdb(8), pr-edit(8), query- pr(1), queue-pr(8), send-pr(1). COPYING
Copyright (c) 1993, 2003, Free Software Foundation, Inc. Permission is granted to make and distribute verbatim copies of this manual provided the copyright notice and this permission notice are preserved on all copies. Permission is granted to copy and distribute modified versions of this manual under the conditions for verbatim copying, provided that the entire resulting derived work is distributed under the terms of a permission notice identical to this one. Permission is granted to copy and distribute translations of this manual into another language, under the above conditions for modified versions, except that this permission notice may be included in translations approved by the Free Software Foundation instead of in the original English. GNATS
August 2003 edit-pr(1)
All times are GMT -4. The time now is 05:21 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy