66 SPARC Enterprise Mx000 Servers Administration Guide • April 2007
XSCF Shell Procedures for Auditing
This section describes these tasks:
■ To Enable or Disable Writing of Audit Records to the Audit Trail
■ To Configure an Auditing Policy
■ To Display Whether Auditing is Enabled Or Disabled
■ To Display Current Auditing Policy, Classes, or Events
▼ To Enable or Disable Writing of Audit Records
to the Audit Trail
1. Log in to the XSCF console with auditadm privileges.
2. Type the setaudit command:
where enable enables writing of audit records, and disable disables writing of
audit records.
▼ To Configure an Auditing Policy
1. Log in to the XSCF console with auditadm privileges.
2. Type the setaudit command:
Refer to the setaudit(8) man page for details on option information.
3. Verify the operation with the showaudit all command:
XSCF> setaudit enable|disable
XSCF> setaudit [-p count|suspend][-m mailaddr][-a users=
enable|disable|default][-c classes={enable|disable}][-e events=
enable|disable][-g {enable|disable}][-t percents]
XSCF> showaudit all