Re: Dealing with BSM Audit Logs






Crist J. Clark-2 wrote:

Anyway, I am in search of tools to deal with audit logs. For
example, I suspect that this noise is from ufsdump/restore,
but this is hard to back out. It'd be sweet to have a tool
where I could pull out all of the logs related to a process,
including its children, and look at them. Something interactive
would be so-o cool. Using auditreduce(1M) and praudit(1M) with
grep, perl, and awk only goes so far, especially when it
comes to GBs of logs.

Are there tools out there for this? Any leads, from Sun, free
stuff, your scripts, or third-party commercial, would help.


We are working on an audit trail tool which will be available as beta
shortly:
http://auditanalyzer.com/ http://auditanalyzer.com/
--
View this message in context: http://www.nabble.com/Dealing-with-BSM-Audit-Logs-tf2477062.html#a9370549
Sent from the Security - Sun mailing list archive at Nabble.com.



Relevant Pages

  • RE: MS Audit logs
    ... Microsoft windows audit logs. ... can set up the log to overwrite the oldest entries as needed (sounds ... 3131 South Las Vegas Blvd, Las Vegas, NV 89109 ...
    (Security-Basics)
  • RE: MS Audit logs
    ... For gathering the logs I always recommend Snare. ... Microsoft windows audit logs. ...
    (Security-Basics)
  • Re: SQL 2000 Lockout?
    ... Yes we do have audit logs and monitor the Failed Attempts but just was ... With SQL Server 2000, there is nothing native to do this. ... If you server is set to Audit Failed Logins, ...
    (microsoft.public.sqlserver.security)
  • Re: Audit Logs
    ... >>I enabled the audit logs for object access on the ... The local computer Event Viewer is ... >> could check on these logs. ...
    (microsoft.public.win2000.group_policy)
  • Re: Audit Logs
    ... >I enabled the audit logs for object access on the default ... > domain policy. ... The local computer Event Viewer is showing ... > could check on these logs. ...
    (microsoft.public.win2000.group_policy)