AIX Syslog Logging

pts.
Tags:
Linux
Security
We are trying to get user account creation and deletion logs to the AIX Syslog. We have *.Debug as the logging level set in syslog.conf file. How ever the user account creation and deletion are not generating any entries to the syslog file. We are getting Login logout and SU login details to the log Please advice as to how we can get the User account creation and deletion details to the syslog in AIX Thanks

Answer Wiki

Thanks. We'll let you know when a new response is added.

You need to use the aix auditing system to enable auditing those events. (audit start or audit on)

The configuration is in /etc/security/audit

look in the config file.
You will need to use stream mode and then add
the appropriate stream commands in the audit stream file

and configure the appropriate events.

We output our audits to syslog by poping the output of

auditstream | auditpr -v | perllogger.pl

You will need to also add something to your startup routines.

email if you need more information..

ttyl… Mica

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Micajc
    You need to use the aix auditing system to enable auditing those events. (audit start or audit on) The configuration is in /etc/security/audit look in the config file. You will need to use stream mode and then add the appropriate stream commands in the audit stream file and configure the appropriate events. We output our audits to syslog by poping the output of auditstream | auditpr -v | perllogger.pl You will need to also add something to your startup routines. email if you need more information.. ttyl... Mica
    0 pointsBadges:
    report
  • ThePat
    Whe also would like to use perllogger.pl were can we find this script file?
    10 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following