Logfile Encapsulation - HP -UX B6941-90001 Administrator's Reference Manual

Table 5-12
Table 5-13
Logfile
/var/adm/aix_sulog
/var/adm/audit log
a
/tmp/syslog
/etc/security/failed
login (binary format)
/var/adm/wtmp (binary
format)
/var/adm/ras/errors
(binary format)
a. Refer to /etc/syslog.conf to determine or to set the actual syslog logfile name
and the events to be logged.
Configuring ITO
Preconfigured Elements
ITO Event-correlation Runtime: Supported Platforms
Platform
HP-UX 10.x
HP-UX 11.x
Solaris: 2.51, 2.6, 7
Windows NT: 3.51, 4.0
Logfile Encapsulation
For detailed information about encapsulated logfiles, refer to the
appropriate template in the ITO GUI. Note that the templates are
configured to collect information from logfiles that are produced by
standard installations. If you are monitoring a non-standard
installation, you should modify the templates to suit your special
situation.
Encapsulated Logfiles on AIX Managed Nodes
Description
Switch user logfile.
Auditing information logfile
Syslog daemon logfile
History of AIX failed logins
History of logins, logouts
and data changes
Messages generated by the
AIX kernel
236
ITO
Management
Server
Template Name
Su (AIX)
Audit Log (AIX)
Syslog (AIX)
Bad logs (AIX)
Logins (AIX)
Kernel Logs (AIX)
ITO Agent
Chapter 5