For regulatory purposes we have to start retaining CM audit / history logs. Can anyone share how they've done this? I see in the /var/logs/ecs there are 3 command history files, which look to be 1 month each. They are also associated to the root account. How would I gain access, and offload these regularly ?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
CM Command History / Audit
- Thread starter wpetilli
- Start date
phoneguy55
Programmer
They are all readable by your superuser account. -rw-r--r--
I use a script to download the files daily and dump to a database where they are searchable and stored for as long as necessary.
I use a script to download the files daily and dump to a database where they are searchable and stored for as long as necessary.
- Status
Similar threads