Sponsored Content
Top Forums UNIX for Dummies Questions & Answers Problem with structure of authlog in regard to an external log Auditing system. Post 302852009 by Sjleegketting on Tuesday 10th of September 2013 09:17:20 AM
Old 09-10-2013
Hello guys,

Thanks for the replies!

Unfortunately I cannot deploy your file edit suggestions. The syslog daemon is set to send the logging directly to ArcSight besides writing it to file. Manipulating the written syslogs is therefore not a valid solution besides the fact this would break security policy because editing a system file before submission will not be accepted, even via (cron)script. They don't really trust us root admins ;-)

I essentially thus really need to be able to change the output of the syslog daemon.

I will check what log level I have set and if your suggested change is something I can test. I will also revert to the OS supplier for checking version and update possibility.

But. Does anyone know about the ssh authentication order and the way that influences the logged message? I found some suggestions online that changing the order would change logged messages?

Best regards,
Sjleegketting.
 

9 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

System Auditing

Hi all, Have been asked to learn up on providing Sytem Auditing on two SCO boxes. Where should I start and what pointers can anyone provide. Whilst I'm learning to look after these two SCO boxes, I'm also to eventually look after three Compaq DS20E True64 Unix boxes also in the near future. (2 Replies)
Discussion started by: Cameron
2 Replies

2. UNIX for Dummies Questions & Answers

Problem w. case structure

Hello, I am having a problem setting a range of numbers for the "case" structure. I can use with no problems, but when I use it doesn't work??? Does the case struture allow numeric ranges? eg: echo -e "enter number between 0 and 60: \c" read $answer case $answer in ) echo... (2 Replies)
Discussion started by: Joe54321
2 Replies

3. Shell Programming and Scripting

with Regard to Case Statement

I need to check if $1 is A or B I tried the following but it seems its not correct..would appreciate a suggestion ? case "$1" in "A" || "B" ) ;; esac Thanks (4 Replies)
Discussion started by: cosec
4 Replies

4. Solaris

authlog

dear all does any one how to activate the log authlog on solaris (3 Replies)
Discussion started by: murad.jaber
3 Replies

5. Shell Programming and Scripting

problem with listing of directory structure

Hi When im listing (ls -al ) its listing directories without / at the end of directories dir1 dir2 dir3 and i need to list directories with dir1/ dir2/ dir3/ and this should not be made by command ls -F / should be embedded at the last since one of the scripts reads directories... (1 Reply)
Discussion started by: vasanthan
1 Replies

6. Shell Programming and Scripting

copy directory structure to a system on the network

I am trying to write a script which has to copy the directory structure from my system to another system on the network. But I dont want the files to be copied. I think I have to start with copying all subdirectories names in a directory to a system on the network. Here's the case: Source... (1 Reply)
Discussion started by: firefox211
1 Replies

7. Programming

Problem in static structure array in C

Hi, I have a following problem in C. I have a function A in which I used to call another function (function B) and pass an array of values through array variable by using below:- foo=functionB(array); In functionB, i used to just return some "values" (e.g return num;) in order to pass... (1 Reply)
Discussion started by: ahjiefreak
1 Replies

8. Shell Programming and Scripting

Bash script to process file without regard for case

Hello, I have a Bash script that processes a text file so that the existing file will look something like this: /www/repository/2010/201002231329532/LTLO_0407.pdf /www/repository/2010/201002231329532/LTLO_0507.pdf /www/repository/2010/201002231329532/LTLO_0607.pdf... (1 Reply)
Discussion started by: manouche
1 Replies

9. UNIX for Dummies Questions & Answers

Best way of System Logging and Auditing?

As part of server hardening process i would like to know the Best way of System Logging and Auditing. Following point should be taken into consideration. Logging of critical events Logging access to critical accounts Secure storage and availability of logs Review of logs Security of logs (4 Replies)
Discussion started by: pinga123
4 Replies
networkd(8)						    BSD System Manager's Manual 					       networkd(8)

NAME
networkd -- network daemon. SYNOPSIS
networkd DESCRIPTION
networkd is a launch-on-demand daemon that performs opreations on behalf of code in libystem_network, a component of libSystem. networkd has no user-specifiable command-line argument, and users should not run networkd manually. LOGGING There are several methods with which to examine networkd's internal state for debugging and diagnostic purposes. The syslog(1) logging levels map as follows: Error - Error messages Warning - Non-fatal concerns Notice - Internal state messages Info - Informational messages By default, only log level Notice through Error is logged. Syslog may be used to modify the mask which logging levels are logged. For example, to enable log levels Emergency - Debug : % sudo syslog -c networkd -d The networkd settings file may also be used to change the log level. This method will add some additional logging that may be missing using the syslog technique listed above. This method is also persistent across runs of networkd For example, to enable log levels Emergency (1) through Debug (7): % sudo defaults write /Library/Preferences/com.apple.networkd networkd_log_level -int 7 The networkd settings file may also be used to change the log level for code in libsystem_network. For example, to enable log levels Emer- gency (1) through Debug (7) for libsystem_network code: % sudo defaults write /Library/Preferences/com.apple.networkd libnetcore_log_level -int 7 A SIGINFO signal will dump a snapshot summary of the internal state to the system log at log level NOTICE : % sudo killall -INFO networkd FILES
/usr/libexec/networkd The binary. /System/Library/LaunchDaemons/com.apple.networkd.plist The launchd.plist(5) controlling the networkd job. /Library/Preferences/com.apple.networkd.plist An optional preferences file read by networkd. BUGS
networkd bugs are tracked in Apple Radar component "networkd". HISTORY
networkd first appeared in Mac OS X 10.7. SEE ALSO
networkd_privileged(8), syslogd(8), launchd.plist(5) Darwin June 2, 2019 Darwin
All times are GMT -4. The time now is 12:01 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy