rollover of auditd logs

From: Jeff Higgins <HIGGINS_at_aces.k12.ct.us>
Date: Mon, 21 Apr 1997 10:26:20 -0400 (EDT)

Is the only wayto enable daily audit log switching to schedule auditd -x in
cron? I would think there's a way to configure the daemon to do this, but as
close as I have come is to use auditd -d 1d, which only dumps the buffer.
I have been through audit_setup twice, looking for a way to specify what to do
there but came out blank. Thanks!

Jeff Higgins
ACES Technology Services
Hamden, CT

Here is the output from auditd -w

# /usr/sbin/auditd -w

Audit data and msgs:
  -l) audit data destination =
/disk1/audit_history/auditlog.013
  -c) audit console messages = /var/audit/auditd_cons
  -d) audit data dump frequency = 1d

Network:
  -s) network audit server status (toggle) = off
  -t) connection timeout value (sec) = 4

Overflow control:
  -f) % free space before overflow condition = 10
  -o) action to take on overflow = change to next auditlog location
      alternate auditlog locations = /d/disk0/overflow
Received on Mon Apr 21 1997 - 16:58:38 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:36 NZDT