Parsing Powerbroker Logs for SysAdmin Changes (SOX)


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers Parsing Powerbroker Logs for SysAdmin Changes (SOX)
# 1  
Old 07-08-2008
Question Parsing Powerbroker Logs for SysAdmin Changes (SOX)

I need to identify a list of AIX command strings that can be used to parse Powerbroker logs for changes that are being made by Unix SysAdmins. Need to filter out (as much as possible) inquiry or routine maintenance activity and concentrate on software/security changes.

This is for internal SOX monitoring (control self-assessment) - I am not an auditor.

Can anyone help? Suggestions?
# 2  
Old 07-08-2008
Hammer & Screwdriver Perhaps one thought...

You can grep -v the file to exclude data. For instance --

cat mylogfile | grep -v "routine"
or
cat mylogfile | grep -v "routine" >mylogfile.2

The first example will send the file to stdout (your screen normally) while the second example will direct the output to a new file. In both cases, any lines with the word "routine" would be excluded.
You could try the second approach, and then if you find another keyword to exclude re-do the command but with the next keyword, for example

cat mylogfile.2 | grep -v "ordinary" >mylogfile.3

Be aware of overall filespace, and remember to clean-up when done. Sometimes log files are very large. Perhaps this gives you a start?
 
Login or Register to Ask a Question

Previous Thread | Next Thread

6 More Discussions You Might Find Interesting

1. UNIX and Linux Applications

Parsing Tuxedo Logs

Right now I am parsing Tuxedo logs to calculate response times for various services. I was hoping to find a log tool that had support for Tuxedo and would generate drill down html reports. ---------- Post updated at 02:35 PM ---------- Previous update was at 02:33 PM ---------- I just wanted... (0 Replies)
Discussion started by: Lurch
0 Replies

2. Shell Programming and Scripting

Help parsing logs maybe with menu and variables?

I would like to parse through some logs looking for things like exception or failed (grep -i failed). Ideal would be if it were in a menu format so someone without unix ability could just choose option 1 2 or 3 etc. If I could pass the hostname to a variable also that would be awesome, so someone... (5 Replies)
Discussion started by: taekwondo
5 Replies

3. Shell Programming and Scripting

Parsing log files, displaying logs between specific dates

Sorry, couldn't really think of a simple subject/title. So, I have a log file, and the dates are displayed like so: 2009-03-05 02:49:44 So the first and second field are the date/time. I can change them into a unix timestamp easily with: date -d "2009-03-05 02:49:44" +%s However,... (17 Replies)
Discussion started by: Rhije
17 Replies

4. Shell Programming and Scripting

Parsing out the logs and generating report

My file will contain following(log.txt): start testcase: config loading ...... error XXXX ..... end testcase: config loading, result failed start testcase: ping check ..... error ZZZZZ ..... error AAAAA end testcase: Ping check, result failed I am expecting below output. ... (4 Replies)
Discussion started by: shellscripter
4 Replies

5. UNIX for Advanced & Expert Users

sudo & Sox compliance

Hello, I am trying to convince my boss to stop allowing our users to login as root (superuser). Currently our users login to our unix server with their own account, then as needed, they will do an su and put in the root password. This scares me, for a bunch of reasons. Mainly, one is that we... (1 Reply)
Discussion started by: rwallaceisg
1 Replies

6. UNIX for Dummies Questions & Answers

Powerbroker policy file advice needed

I have a requirement to be able to issue selected commands with root privileges but don't have the ability to su to root due to audit requirements dictating that only our UNIX SA's have that feature. I was told that Powerbroker would allow me to run the commands as root but our security people... (1 Reply)
Discussion started by: yvs24
1 Replies
Login or Register to Ask a Question