TMF Supplement for Large Audit Files (G06.24+)

TMF Reference Manual
HP NonStop TMF Supplement for Large Audit-Trail Files—527391-001
5-6
ADD AUDITTRAIL (Pages 3-14 through 3-19)
Usage Guidelines
There must be exactly one master audit trail in a TMF system. In addition, there can
be up to 15 optional auxiliary audit trails. Auxiliary audit trails receive the audit
information generated by a specified set of data volumes; they do not contain TMF
control information. Auxiliary audit trails can be added to a TMF configuration to
increase overall auditing capacity and bandwidth, or to logically separate operations
related to sets of data volumes. Each auxiliary audit trail is uniquely identified by the
prefix AUX followed by a two-digit number: for example, AUX03.
For attributes not specified in the ADD AUDITTRAIL command, you can assign values
by entering SET AUDITTRAIL commands earlier in the same TMFCOM session;
otherwise, the default values, if they exist, are used.
Before it takes effect, the ADD AUDITTRAIL command verifies that the volumes
specified do not contain any files in the ZTMFAT subvolume, which is reserved for use
by audit trails created under the current TMF configuration. You can use the DELETE
TMF command to purge any audit-trail files left over from a previous TMF
configuration.
FILESIZE Option Considerations
The FILESIZE option applies to both format 1 and format 2 audit-trail files. Format 1
and format 2 are disk partition formats that can range up to approximately 2 GB and
1024 GB in size, respectively. Larger format 2 files can help decrease the number of
audit-trail rollovers for systems that have high audit-generation rates. The file format
(format 1 or format 2) is determined by the ATFORMAT option in the ALTER TMF
command.
If you do not specify a FILESIZE value in the ADD AUDITTRAIL command, TMF
creates files of 100 MB each (for format 1 files) or 1024 MB each (for format 2 files) by
default.
The FILESIZE value affects only the active volumes for the audit trail identified in this
specific ADD AUDITTRAIL command. When this command is run, the new FILESIZE
value becomes effective for all audit-trail files that are subsequently renamed or
created for this audit trail, as follows:
•
When an existing audit-trail file is renamed forward during audit-trail rollover, and
this file has a different file size or format (format 1 or format 2) than the configured
values for these parameters, TMF creates a new renamed file of the configured
size and format, and purges the existing file.
•
When an existing audit-trail file is renamed forward during audit-trail rollover, and
this file has the same file size and format as the configured values, TMF simply
renames the file.
•
When new audit-trail files are preallocated, TMF creates them with the configured
file size for the specified audit trail and the format value currently in effect for the
TMF configuration. (Always remember that while the FILESIZE value applies to a