Safeguard Audit Service Manual (G06.24+, H06.03+)

Contents
Safeguard Audit Service Manual—520480-014
ii
2. Specifying Auditing (continued)
2. Specifying Auditing (continued)
Auditing Events Performed by a Specific User 2-11
Example 2-12
Performance Considerations 2-12
Shorthand for Audit Attributes 2-12
Controlling Auditing of NonStop Client Events 2-14
OSS Auditing 2-18
Configuring Safeguard for Systemwide Auditing 2-19
The ALTER SAFEGUARD Command 2-20
The INFO SAFEGUARD Command 2-20
Systemwide Device Auditing 2-20
Systemwide Disk-File Auditing 2-21
Systemwide Process Auditing 2-22
Systemwide Auditing of All Objects 2-23
Systemwide Auditing for Users, Aliases, and Groups 2-24
Unconditional Auditing 2-25
ALTER SAFEGUARD and STOP SAFEGUARD Commands 2-26
Audit Service Commands 2-26
TERMINAL Commands 2-26
EVENT-EXIT-PROCESS Commands 2-26
3. Managing the Audit Trail
About the Audit Trail 3-1
Audit Service Commands 3-2
Establishing Security Groups 3-3
Defining and Managing the Audit Trail 3-3
Creating an Audit Pool 3-4
Selecting an Audit Pool 3-5
Specifying Audit Service Recovery 3-5
Altering the Audit Pool Disk Allocation 3-7
Closing an Audit File 3-7
Releasing Audit Files 3-8
Deleting Audit Files 3-8
Deleting an Audit Pool 3-8
Audit Pool Precautions During a Cold Start 3-9