Safeguard Audit Service Manual (G06.24+, H06.03+)

Audit Service Command Syntax
Safeguard Audit Service Manual—520480-014
4-15
SELECT Command
SELECT Command
SELECT selects a previously defined audit pool as the current audit pool or the next
audit pool.
When you select the current audit pool, the audit service automatically begins writing
audit records to the first available audit file in that audit pool. You need not execute a
NEXTFILE command to initiate the writing of audit records to this audit pool.
If you select an audit pool as the next audit pool, the audit service automatically
switches to that audit pool when the current audit pool becomes filled.
Members of either security group can execute this command.
pool
specifies the audit pool to be selected as the current or next audit pool. pool is
one of:
CURRENT AUDIT POOL $vol.subvol
NEXT AUDIT POOL $vol.subvol
CURRENT AUDIT POOL $vol.subvol
specifies the volume and subvolume selected as the location of the current
pool. This volume and subvolume must have been previously defined with an
ADD AUDIT POOL command, and the volume must be accessible.
NEXT AUDIT POOL $vol.subvol
specifies the volume and subvolume selected as the location of the next audit
pool. This volume and subvolume must have been previously defined with an
ADD AUDIT POOL command.
Considerations
•
The SELECT CURRENT AUDIT POOL command is rejected if no files are
available in the specified audit pool. To select this audit pool as the current audit
pool, you must first either release files or increase the number of MAXFILES in the
audit pool.
•
The audit service does not check the status of the next audit pool when you
execute a SELECT NEXT AUDIT POOL command. It is your responsibility to
check that this audit pool is accessible and has files available when it is put in use
as the current audit pool.
•
All attempts to execute this command are audited.
SELECT pool [ , pool ]