Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

Audit Service Command Syntax
Safeguard Audit Service Manual — 520480-031
4 - 5
ALTER AUDIT SERVICE Command
Considerations
•
If you lower the value of MAXFILES, the audit service attempts to delete enough
released audit files to reach the new MAXFILES value. If not enough released files
are available for deletion, the audit service deletes as many released files as
possible. In this instance, the new MAXFILES value is set to the user-specified
value, and the additional files are deleted when they are released.
•
You can use ALTER AUDIT POOL to alter the disk allocation parameters for the
secondary audit pool $SYSTEM.SAFE. This audit pool is initially configured with
EXTENTSIZE (128,128), MAXEXTENTS 16, and MAXFILES 2.
•
All attempts to execute this command are audited.
Examples
1. This command changes the disk allocation parameters for the current audit pool so
the primary and secondary extents are 256, the maximum extents are 32, and the
maximum audit files are 6:
=ALTER AUDIT POOL EXT (256,256), MAXEXTENTS 32, &
=MAXFILES 6
2. This command changes the primary extent to 64 for files in the audit pool on
$OP1.AUDIT. Other disk allocation parameters for this audit pool remain
unchanged:
=ALTER AUDIT POOL $op1.audit EXTENTSIZE (64)
3. This example illustrates how to delete released audit files. It assumes that the six
audit files named A0000063 through A0000068 are in the audit pool on
$OP2.AUDIT. This sequence of commands releases and deletes four of these
audit files:
=RELEASE A65:A68 IN $op2.audit
=ALTER AUDIT POOL $op2.audit MAXFILES 2
ALTER AUDIT SERVICE Command
ALTER AUDIT SERVICE alters the audit service operating modes. The operating
modes control the manner in which audit records are written to disk and the recovery
actions to be taken if access to the current audit pool is interrupted.
Only members of the SECURITY
-ADMINISTRATOR security group can execute this
command.
Caution. Altering the current audit pool can cause system performance problems.
ALTER AUDIT SERVICE [ , ] operating-mode
[ , operating-mode ] ...