OpenVMS documentation

Table of Contents

Overview of the Auditing Process

Reporting Security-Relevant Events

Ways to Generate Audit Information
Kinds of System Activity the Operating System Can Report
Sources of Event Information

Developing an Auditing Plan

Assessing Your Auditing Requirements
Selecting a Destination for the Event Message
Considering the Performance Impact

Methods of Capturing Event Messages

Using an Audit Log File
Enabling a Terminal to Receive Alarms
Secondary Destinations for Event Messages

Analyzing a Log File

Recommended Procedure
Invoking the Audit Analysis Utility
Providing Report Specifications
Using the Audit Analysis Utility Interactively
Examining the Report

Managing the Auditing Subsystem

Tasks Performed by the Audit Server
Disabling and Reenabling Startup of the Audit Server
Changing the Point in Startup When the Operating System Initiates Auditing
Choosing the Number of Outstanding Messages That Trigger Process Suspension
Reacting to Insufficient Memory
Maintaining the Accuracy of Message Time-Stamping
Adjusting the Transfer of Messages to Disk
Allocating Disk Space for the Audit Log File
Error Handling in the Auditing Facility

This chapter describes how to use and manage the OpenVMS auditing system. It explains how you can monitor security-relevant activity on your system by recording events as they occur on the system and subsequently analyzing this audit log.

HP OpenVMS Systems Documentation

Chapter 10 Security Auditing