HP 3000 Manuals HP 3000 Manuals
Chapter 7 Auditing System Use
This chapter describes methods for creating audit trails, by which system
usage can be determined. Well defined audit trails tell you:
* Who is and who has been using the system.
* When.
* For how long.
* Which files were accessed.
* Which commands and system facilities were used.
MPE/iX provides you with three separate logging facilities: system
logging, memory logging, and user logging. Each operates separately and
has no effect on the others. The purpose of each is as follows:
* System Logging: Records the use of system resources by accounts,
groups, and users on a job or session basis. Logs errors and
other events detected by various system modules.
* Memory Logging: Records errors that occurred in memory. This
function is useful primarily to system administrators.
* User Logging: Allows users and subsystems to record additions and
modifications to databases and other files used in applications
programs.
System file information is also recorded in the system log file and that
is why the System Managers need to know about system logging and LOGTOOL
to audit system security. With the system logging facility, you can keep
track of the following:
* File close.
* Job initiation.
* Process termination.
* Line disconnection.
* Line close.
* Console messages.
* Stream initiation.
* User logging.
* Process initiation.
* ACD creation and modification.
* Printer access refusals.
* System logging configuration.
* Restore.
* System shutdown.
* Logging errors.
* System startup.
* System shutdown.
* Power failures.
* Spoolfile completions.
* Physical volume mounts/dismounts.
* Logical volume mounts/dismounts
* Tape label reads.
* System console activity.
System logging is discussed in detail in the rest of this chapter. User
logging is covered in the User Logging Programmer's Guide (32650-90027).