The related topics explain the steps you need to take to set up HP-UX auditing and monitoring, as follows:
For detailed instructions, see Installing Agents Manually.
Syslog is an important logging facility in HP-UX. Syslog functionality is provided by the syslogd daemon, which accepts messages from various sources that support logging, and either writes these messages to files or passes them on to other hosts in the network.
The InTrust agent processes the message flow before it arrives at syslogd's input. However, the agent catches only the local messages; it does not catch messages redirected from other computers over the network. Therefore, do not rely on syslogd message redirection feature if you audit and monitor Syslog with InTrust. InTrust support for the HP-UX Syslog depends on local messages.
It is up to you how you configure syslogd logging. This configuration does not affect the operation of the InTrust agent, which provides all the Syslog data that InTrust accepts.
The HP-UX audit system does not require additional configuration for the InTrust agent to work with the audit log. The agent is aware of the two current binary audit log files.
Note that if you change the locations of the audit log files, the agent will no longer work with the old files, which may still contain important data.