Created On:  26 May 2011

Problem:

How do you generate an audit report file and dump the collection file so that it is available for further audit records to be logged?

Resolution:

To generate an audit report file and dump the collection file:

The '-r' flag for the auditadm command generates an audit report text file.
The '-d' flag 'dumps' the audit collection file to make it available once again to log audit events.
These commands have to be specified in separate commands as follows:

mfauditadm -r -o audit_text_file.out -f audit_events.aud_1 mfauditadm -d -f audit_events.aud_1

Note that the current status of the audit collection files can be obtained as follows:

mfauditadm -f audit_events.aud_1
Incident #2518501