[prev in list] [next in list] [prev in thread] [next in thread] 

List:       opensolaris-rfe
Subject:    [osol-rfe] Re: enhancements / new commands for handling extended
From:       dorofeev () gmail ! com (Andrei Dorofeev)
Date:       2005-07-11 21:15:25
Message-ID: 33263818.1121141596243.JavaMail.suncom () oss1
[Download RAW message or body]

Is the problem with using wracct(1M) for these
purposes that it writes accounting records to the
extended accounting log files, and not audit logs?

As for the way of rotating the accounting files,
logadm(1M) can be configured to safely rotate
the accounting files.  I haven't tried it, but if you
put something like this in /etc/logadm.conf and
restart logadm, I think it should work:

# /var/adm/exacct/proc \
  -a '/usr/sbin/acctadm -f /var/adm/exacct/proc process ; \ 
  /usr/sbin/acctadm -E process' \
  -b '/usr/sbin/acctadm -x process' -p 1d

We don't have a tool to parse accounting files
and output them in xml, but take a look at /usr/demo/libexacct/exdump.c.
This demo program shows to to write simple parsers for
exacct files in C.  It can be tweaked to produce XML results.

Hope this helps,

- Andrei
This message posted from opensolaris.org

[prev in list] [next in list] [prev in thread] [next in thread]