AIX Syslog Logging
We are trying to get user account creation and deletion logs to the AIX Syslog.
We have *.Debug as the logging level set in syslog.conf file.
How ever the user account creation and deletion are not generating any entries to the syslog file.
We are getting Login logout and SU login details to the log
Please advice as to how we can get the User account creation and deletion details to the syslog in AIX
Thanks
Software/Hardware used:
Software/Hardware used:
ASKED:
September 12, 2006 11:19 AM
UPDATED:
April 9, 2012 3:34 AM
Answer Wiki:
You need to use the aix auditing system to enable auditing those events. (audit start or audit on)
The configuration is in /etc/security/audit
look in the config file.
You will need to use stream mode and then add
the appropriate stream commands in the audit stream file
and configure the appropriate events.
We output our audits to syslog by poping the output of
auditstream | auditpr -v | perllogger.pl
You will need to also add something to your startup routines.
email if you need more information..
ttyl... Mica
To see all answers submitted to the Answer Wiki: View Answer History.
You need to use the aix auditing system to enable auditing those events. (audit start or audit on)
The configuration is in /etc/security/audit
look in the config file.
You will need to use stream mode and then add
the appropriate stream commands in the audit stream file
and configure the appropriate events.
We output our audits to syslog by poping the output of
auditstream | auditpr -v | perllogger.pl
You will need to also add something to your startup routines.
email if you need more information..
ttyl… Mica
Whe also would like to use perllogger.pl were can we find this script file?