Starting the Audit Process
Use Audit Trail Creation Process (220.127.116.11) to start a background process that moves staged audit data from the staging table in qaddb to the appropriate audit database.
Audit Trail Creation Process (18.104.22.168)
To commit generated audit information to the audit database, the Audit Trail Creation Process should be running when any active audit profiles are scheduled to become effective.
Consider using a CIM startup script to start this process automatically after system backups or downtime. Otherwise, it must be manually started whenever the system is restarted.
Note: The installation guideincludes a sample CIM file and startup scripts for executing this program.
Audit Trail Creation Process generates e-mail messages to the system administrator group when connection errors occur. The system also saves time-stamped messages related to database connection to the log file specified in this program. These messages record when an audit process starts and ends, as well as any connection errors. Messages look like the following samples:
2003-12-05 @ 14:26:53 AT Creation Process session begin
2003-12-05 @ 14:27:43 Database connection failed 12-04-03
2003-12-05 @ 14:27:43 AT Creation Process session end
2003-12-05 @ 14:28:11 AT Creation Process session begin
2003-12-05 @ 14:28:11 This process was shutdown from User Account Ctrl
2003-12-05 @ 14:28:11 AT Creation Process session end
The log file name defaults from the value specified in User Accountability Control (22.214.171.124). You can specify a full path and file name for the log file; if only the file name is specified, the file is located in the directory where the session running the audit trail creation process was started.
If multiple processes are being used, you can specify a different log file for each. If you do not specify separate log files and multiple sessions are started from the same directory, messages from each process are saved to the same log file.
Audit Trail Control (126.96.36.199)
To start up the creation process, the AT Creation Process Shutdown Request field must be No in Audit Trail Control.
Shut down the Audit Trail Creation Process by exiting the session from where it was started. Alternatively, use Audit Trail Control to shut down all Audit Trail Creation Processes by setting the shutdown field to Yes.