Trusted Solaris Audit Administration

To Send Audit Records to a New Audit File

    To change the current audit file for audit records being generated on the system, as role secadmin at label admin_high:


    $ audit -n filename 
    

    The new file is created in the same directory as the current file. The directory must be able to contain files labeled admin_high.