Chapter 10 Security Auditing
| | |
| ||
| ||
Table of Contents
- Overview of the Auditing Process
- Reporting Security-Relevant Events
- Developing an Auditing Plan
- Methods of Capturing Event Messages
- Analyzing a Log File
- Managing the Auditing Subsystem
- Tasks Performed by the Audit Server
- Disabling and Reenabling Startup of the Audit Server
- Changing the Point in Startup When the Operating System Initiates Auditing
- Choosing the Number of Outstanding Messages That Trigger Process Suspension
- Reacting to Insufficient Memory
- Maintaining the Accuracy of Message Time-Stamping
- Adjusting the Transfer of Messages to Disk
- Allocating Disk Space for the Audit Log File
- Error Handling in the Auditing Facility
This chapter describes how to use and manage the OpenVMS auditing system. It explains how you can monitor security-relevant activity on your system by recording events as they occur on the system and subsequently analyzing this audit log.