Safeguard Audit Service Manual (G06.24+, H06.03+)

Audit Service Command Syntax
Safeguard Audit Service Manual—520480-014
4-6
ALTER AUDIT SERVICE Command
WRITE-THROUGH CACHE { ON | OFF }
ON specifies that after each audit record is written, the block in which it resides
is written to disk.
OFF specifies that a block modified as a result of writing an audit record can be
cached in memory and not written to disk immediately.
The initial setting of WRITE-THROUGH CACHE is OFF.
EOF REFRESH { ON | OFF }
ON specifies that the end-of-file pointer in the disk file label is updated each
time an audit file record is written (even if the record is cached in memory).
This mode is implicitly activated when WRITE-THROUGH CACHE is ON.
However, if EOF REFRESH is ON, it is not deactivated if WRITE-THROUGH
CACHE is OFF.
OFF specifies that the end-of-file pointer in the disk file label is not updated
until an audit file record is written to disk.
The initial setting of EOF REFRESH is OFF.
RECOVERY recovery
specifies the action to be taken if the current audit pool becomes filled or
inaccessible and the next audit pool is undefined or inaccessible.
recovery
can be any of:
RECYCLE [ FILES ]
SUSPEND AUDIT
DENY GRANTS
RECYCLE [ FILES ]
specifies that the oldest unreleased audit file is to be reused. This file is
purged, and its name is changed to that of the next audit file in
sequence. RECYCLE FILES is the initial RECOVERY setting.
Under certain circumstances, audit files in $SYSTEM.SAFE are not
recycled. For more information, see Considerations on page 4-7.
If this recovery action is specified and a down volume condition occurs,
the audit service suspends auditing because it cannot recycle the files
on a down volume.
SUSPEND AUDIT
specifies that auditing is suspended as long as the condition exists.