event_class man page on HP-UX

Printed from http://www.polarhome.com/service/man/?qf=event_class&af=0&tf=2&of=HP-UX

event_class(5)							event_class(5)

       event  class  file - The file that contains the declaration of an event

       Audit events can	 be  logically	grouped	 into  event  classes.	 Event
       classes are defined in event class files.  An event class file contains
       an event class number and a list	 of  event  numbers  corresponding  to
       audit events.

       All  event  class  files	 must  be created in the dcelocal/etc/audit/ec

       The name of the event class file becomes the name of the	 event	class.
       The recommended naming convention for event class files is:


       where class is a descriptive text that characterizes the event class.

       Event class files must be write-protected by the local operating system
       (that is, only administrators should have write access to these files).
       Audit  clients  read  these  files  to maintain an event table in their
       address space.

       Optionally, an event class file can contain a SEP line.	This line con‐
       tains  a	 list  of  prefixes of the event numbers in the file.  The SEP
       line speeds up the scanning performed  by  the  Audit  clients.	 Audit
       clients	which  do not have events with one of the prefixes listed will
       not scan the event list.	 If the SEP line is not provided in the	 file,
       Audit  clients  will  have  to  read the entire file to find out if the
       event class file contains any of their events.

       Empty lines are ignored in the event class file.

       Comments are designated by the number sign (#) placed before  the  com‐
       ment text.

   The Event Class File Format
       The  format  of an event class file is: ECN=event_class_number SEP=pre‐
       fix_1 prefix_2 ...  # comments start with the  number  sign  event_num‐
       ber_1 event_number_2

       Following  is  an  example  of  an event class file for the event class
       ec_local_authentication: ECN = 0x00000001  SEP  =  0x100	 #  AS_Request
       0x00000100  #  TGS_TicketReq  0x00000101	 #  TGS_RenewReq  0x00000102 #
       TGS_ValidateReq 0x00000103


List of man pages available for HP-UX

Copyright (c) for man pages and the logo by the respective OS vendor.

For those who want to learn more, the polarhome community provides shell access and support.

[legal] [privacy] [GNU] [policy] [cookies] [netiquette] [sponsors] [FAQ]
Polarhome, production since 1999.
Member of Polarhome portal.
Based on Fawad Halim's script.
Vote for polarhome
Free Shell Accounts :: the biggest list on the net