Safeguard Administrator's Manual (G06.24+, H06.03+)

Table Of Contents
Installation and Management
Safeguard Administrator’s Manual523317-013
10-13
Safeguard Console Messages
Safeguard Console Messages
The Safeguard subsystem reports both status messages and internal error messages
on the system console.
Event messages report on events such as starting and stopping the Safeguard
software, changing the Safeguard configuration, and opening a new audit file.
For a description of the Safeguard console messages, see the Operator Messages
Manual.
Managing Safeguard Audit Files
Initially, the Safeguard software writes audit records to the audit files on
$SYSTEM.SAFE. You can add other audit pools on different volumes and subvolumes,
and you can choose which audit pool is to be used as the current audit poolthat is,
which audit pool is to receive audit records. You can also define the next audit pool to
be used when the current audit pool is filled. Because an audit pool can contain
several audit files, your system might have several different volumes and subvolumes
containing multiple audit files.
When the current audit file is filled, the Safeguard software automatically switches to
the next available file in that audit pool. Alternatively, you can monitor usage of audit
files and manually switch to the next file, or even switch to another audit pool, as
necessary.
As long as unused or released audit files remain available in the current audit pool,
there is no danger of audit data being lost. Even that danger is minimized if you have
specified the next audit pool to be used. Therefore, part of the task of monitoring the
audit service activity is to release (purge) audit files that are no longer needed so that
they can be reused.
You can use the INFO AUDIT SERVICE command to determine the current audit pool
and to verify that the next audit pool has been specified. For more information, see the
Safeguard Audit Service Manual.
The Safeguard subsystem writes a message to the system console each time it
switches from one audit file to another. Therefore, system console messages can also
help you to determine when to extract data from a used audit file.