Chat now with support
Chat with Support

InTrust 11.4.1 - Preparing for Auditing and Monitoring HP-UX

Getting Started

The related topics explain the steps you need to take to set up HP-UX auditing and monitoring, as follows:

  1. Install the InTrust agent on each HP-UX host.
  2. Adjust the configuration of Syslog, if necessary.
  3. Complete the configuration in InTrust Manager.

Agent Setup

For detailed instructions, see Installing Agents Manually.

Configuring Syslog

Syslog is an important logging facility in HP-UX. Syslog functionality is provided by the syslogd daemon, which accepts messages from various sources that support logging, and either writes these messages to files or passes them on to other hosts in the network.

The InTrust agent processes the message flow before it arrives at syslogd's input. However, the agent catches only the local messages; it does not catch messages redirected from other computers over the network. Therefore, do not rely on syslogd message redirection feature if you audit and monitor Syslog with InTrust. InTrust support for the HP-UX Syslog depends on local messages.

It is up to you how you configure syslogd logging. This configuration does not affect the operation of the InTrust agent, which provides all the Syslog data that InTrust accepts.

Configuring HP-UX Audit Log

The HP-UX audit system does not require additional configuration for the InTrust agent to work with the audit log. The agent is aware of the two current binary audit log files.

Note that if you change the locations of the audit log files, the agent will no longer work with the old files, which may still contain important data.

 

Related Documents