Configuring Audit Logs

The following task map points to the procedures for configuring audit logs for the various plugins. Configuring logs for the audit_binfile plugin is optional. The logs for other plugins must be configured by an administrator.

Table 4-1  Configuring Audit Logs Task Map

Task Description For Instructions Add local storage for the audit_binfile plugin Creates additional disk space for the audit files and protects them with file permissions How to Create ZFS File Systems for Audit Files Assign storage for the audit_binfile plugin Identifies directories for binary audit records How to Assign Audit Space for the Audit Trail Configure streaming audit records to a remote system Enables you to send audit records to a remote repository through a protected mechanism How to Send Audit Files to a Remote Repository Configure remote storage for audit files Enables you to receive audit records on a remote system How to Configure a Remote Repository for Audit Files Configure storage for the audit_syslog plugin. Enables you to stream audit events in text format to syslog. How to Configure syslog Audit Logs