ZOS-REMOTE.CONF(5) System Administration Utilities ZOS-REMOTE.CONF(5)NAME
zos-remote.conf - the audisp-racf plugin configuration file
DESCRIPTION
zos-remote.conf controls the configuration for the audispd-zos-remote(8) Audit dispatcher plugin. The default location for this file is
/etc/audisp/zos-remote.conf, however, a different file can be specified as the first argument to the audispd-zos-remote plugin. See aud-
ispd-zos-remote(8) and auditd(8). The options available are as follows:
server This is the IBM z/OS ITDS server hostname or IP address
port The port number where ITDS is running on the z/OS server. Default is 389 (ldap port)
user The z/OS RACF user ID which the audispd-zos-remote plugin will use to perform Remote Audit requests. This user needs READ access to
FACILITY Class resource IRR.LDAP.REMOTE.AUDIT (See audispd-zos-remote(8)).
password
The password associated the the z/OS user ID configured above.
timeout
The number in seconds that audispd-zos-remote plugin will wait before giving up in connection attempts and event submissions. The
default value is 15
q_depth
The audispd-zos-remote plugin will queue inputed events to the maximum of q_depth events while trying to submit those remotely. This
can handle burst of events or in case of a slow network connection. However, the audispd-zos-remote plugin will drop events in case
the queue is full. The default queue depth is 64 - Increase this value in case you are experiencing event drop due to full queue
(audispd-zos-remote will log this to syslog).
SEE ALSO audispd-zos-remote(8)AUTHOR
Klaus Heinrich Kiwi <klausk@br.ibm.com>
IBM Oct 2007 ZOS-REMOTE.CONF(5)
Check Out this Related Man Page
AUDISP-REMOTE:(8) System Administration Utilities AUDISP-REMOTE:(8)NAME
audisp-remote - plugin for remote logging
SYNOPSIS
audisp-remote
DESCRIPTION
audisp-remote is a plugin for the audit event dispatcher daemon, audispd, that preforms remote logging to an aggregate logging server.
TIPS
If you are aggregating multiple machines, you should enable node information in the audit event stream. You can do this in one of two
places. If you want computer node names written to disk as well as sent in the realtime event stream, edit the name_format option in
/etc/audit/auditd.conf. If you only want the node names in the realtime event stream, then edit the name_format option in /etc/audisp/aud-
ispd.conf. Do not enable both as it will put 2 node fields in the event stream.
SIGNALS
SIGUSR1
Causes the audisp-remote program to write the value of some of its internal flags to syslog. The suspend flag tells whether or not
logging has been suspended. The transport_ok flag tells whether or not the connection to the remote server is healthy. The
queue_size tells how many records are enqueued to be sent to the remote server.
SIGUSR2
Causes the audisp-remote program to resume logging if it were suspended due to an error.
FILES
/etc/audisp/plugins.d/au-remote.conf, /etc/audit/auditd.conf, /etc/audisp/audispd.conf, /etc/audisp/audisp-remote.conf
SEE ALSO audispd(8), auditd.conf(8), audispd.conf(8), audisp-remote.conf(5).
AUTHOR
Steve Grubb
Red Hat Apr 2011 AUDISP-REMOTE:(8)
Hi:
Can i access my Linux Box from a remote machine, Login and Run a program(eg: netscape) in a particular display number.
Assuming i do not have XServer running in my machine
Appreciate the help
Thanks,
Preetham. (5 Replies)
Hi all,
I have a script which logs in to the remote server with FTP and with the user id/password and list the files in the path of remote server where thefiles resid.i need to email this output(i.e wether the files are present on not under the path) to my email id. Can u please let me know as... (2 Replies)
Hi all please give me the solution for this im stuck somewhere.
I have two files A and B
file A has 300 records as
000.aud
111.aud
.
.
.
300.aud
file B has 213 records randomly
005.aud
176.aud
.
.
.
200.aud
I want to match similar 213 records in file B from file A. (2 Replies)
Hi,
I use to access a file on remote server. Can I create a link for this file present on remote server on my local server, if yes then please let me know.
Thanx in advance. (7 Replies)
Hi,
i dont have remote m/c user credential. i only know remote m/c ip address. and i am able to ping that remote m/c.
In windows we use: "net time \\computername" to get the remote m/c time.
so how can i get remote m/c time in unix m/c? (means a unix command)
Thanks for the help.
... (9 Replies)
Hi,
I'm having a problem performing for loop on remote server, i know this can be done with one liner but i'm not sure how it works if using logical operator such as for ifs and case or while
for server in sterverA serverB serverC ; do
ssh -v $server "cd ~/MyDocuments/; bag=`find... (6 Replies)
Hello Forumers!
Has anyone successfully implemented forwarding of syslog messages to a remote server which is listening on a port other than udp514?
Thanks! (3 Replies)
Hi,
My script will take 3 i/p's from user. Now i need to pass these 3 values to remote server. Please find my code.
while
do
echo " To which server you want to connect ? "
echo " 1. server1 \n"
echo " 2. server2 \n"
read opt_server
if
then
echo "enter the... (2 Replies)
Hi,
I have an executable running on HP-UX, from this executable I need to findout if the portnumber. lets say 7890,7891, 7892 are listening on the remote server running on HP-UX.
I can do it by creating socket, connect etc. But is there any other way of doing it using "system()" function or... (3 Replies)
i have doubt about how to power on server from remote location with out contacting with data center people? please anybody replay with whole info.
thank you. (3 Replies)
My NIM Master is running at aix 6100-07-02-1150. I would like to migrate to aix V7. The server is an lpar at a remote location. Is there a way to migrate it without going to the remote location and loading a cd into it? (3 Replies)
Hi Experts
Do I need to have "Sudo" privileges or user for file movement for file movement from one remote server to another
or from local to remote server?:wall: (6 Replies)
Hey All,
I am trying to find something similar to minicom, but it needs the ability to be ran during a remote dialup session on the remote
device's side.
If I dial into the remote server (*using minicom) and then try to run minicom on the remote server I get the following:
# minicom... (20 Replies)
Hello Guys,
I need some help to find out if processes are running on remote server or not. I could do 'ssh' to do that but due to some security reasons, I need to avoid the ssh & get result from remote server.
Could you please suggest some that can be done without ssh or similar sort of... (8 Replies)