Administrator's Guide

• An Audit DPMS service module, audit_hpux_raw, that reads raw audit data
collected by the HP-UX auditing system.
• An Audit DPMS service module, audit_hpux_portable, that handles audit data
that is portable across HP-UX systems, and good for retention purpose. Also a sample
script, audit_p2l, that demonstrates how to convert the portable data into
syslog-like messages.
• An Audit DPMS service module, audit_hpux_xml, that converts audit data into
XML format. Also a sample script, audreport_generator, that demonstrates
how to use the auditdp command and the XSLT stylesheets to generate a collection
of web-based audit reports for regulation compliance purposes.
• Sample audit report configuration templates for PCI and SOX that work with the
audreport_generator script.
The following options are available with the auditdp command:
-M module [target] Write audit data to the target using the specified Audit
DPMS service module. The target is the pathname of a file
where to write the data. The file must not already exist. If
the target is omitted, auditdp writes the audit data to the
standard output.
-O option Specify the options (case insensitive) to be passed to the
Audit DPMS framework when writing to the target.
-P [target] Write audit data in portable format. Portable format audit
data can be ported from system to system and is the
recommended format for retention purposes. The target is
the pathname of a file where to write the data. The file must
not already exist. If the target pathname is not absolute,
then the target is assumed to be relative to the current
directory. If the target is omitted, auditdp writes the audit
data to the standard output.
-S filter_file Selectively process audit data based on the Audit DPMS
configuration file specified in filter_file. Only the
audit data matching the filtering criteria will be included
in the target output.
-X [target] Write audit data in Extensible Markup Language (XML)
format. The target is the pathname of a file where to write
the data. The file must not already exist. If the target
pathname is not absolute, the pathname is assumed to be
relative to the current directory. If the target is omitted,
auditdp writes the audit data to the standard output.
Applying Extensible Stylesheet Language Transformations
(XSLT) stylesheets to the resulting XML document generates
"human-readable" web-based audit reports.
184 Audit Administration