Solaris 10, audit -n removing old logfiles.

I have a bit of a strange problem. We are running Solaris 10 on a number of systems.
Auditing is enabled on all systems and we use audit -n to rotate the log files on the hour.
On one system this works fine and each time we do a audit -n it renames the active file to a timestamped version and creates a new active audit file.
However on the other when we do audit -n (either in cron or manaually) it renames the current active one to a timestamped file. Creates a new current audit file. But within 10 seconds the old audit file dissappears.
Is there anything that would cause audit -n to behave in this manner and remove the old audit file after rotation?
Thanks in advance.
Darren

Try running audit -v /path/to/audit_control (probably /etc/security) and make sure if the syntax is ok. Are the flags in audit_control the same for both systems? Does the file system where the audit files are deposited have any kind of quota applied to it? I'm sure you've checked these things - just trying to come up with some ideas.

Similar Messages

  • How to remove old iPhone from iTunes account?

    Last I was on itunes it told me I had 4 out of 5 authorized devices on my account, how do I remove old devices?

    Follow the instructions here >  iTunes Store: About authorization and deauthorization

  • HT203756 How can I remove 'old' or 'incomplete' backups from iCloud?

    How can I remove 'old' or 'incomplete' backups from iCloud? 
    When I attempted, the iPhone 6+ message asked if I wanted to remove ALL of the backups... without giving me the option of selecting the specific one I wanted to remove.
    I had performed 'backups' of my old iPhone, but, when I tried to RESTORE to the REPLACEMENT iPhone, at least one of the iCloud backups shows 'incomplete'.  There was no 'error' on the original iPhone...when it 'failed' to complete the backup.
    Now, I would like to 'clear up' the 'storage' on the iCloud, but am unable to select specific ones. I can either keep all instances or shut off iCloud Backup which would, according to the message, remove/delete ALL of the BACKUPS.
    This shouldn't be this difficult.....

    I too wondered how you remove apps from iCloud.  Judging by the quantity of questions, comments, suggestions and replies (some rather rude) there is a clear need for Apple to make their literature a lot clearer.  The page describing what iCloud backs up refers to "app data" as an item which is backed up.  To the uniniated this might mean the app program but it seems not.  The app is "bought" via iTunes or the App Store and details of your purchase (free or otherwise) is held there separately on the server.
    It would be nice however to be able to remove the reference to junk I have downloaded and decided I don't want so that it doesn't appear on the purchased apps listing!  Apple please note this.
    It must be remembered that Apple products come pitifully supported by manuals "out of the box" on the assumption that it is so easy to use the product that no explanation is needed.  They forget that most buyers of Apple products (me included) don't know (and don't want to know) how they work, so when something is not obvious they are required to plough through Lord knows how many web pages of "knowledge base" material until they find an answer.
    All I can add is that it is worth spending time reading the multiitude of discussion threads before asking the question yet again...

  • How do i remove old iphone backups on my itunes to free up disk space on my hard drive?

    im running low on diskspace and dont have much on my pc other than my itunes. i think the problem is all the iphone backups i have.. i have more than one iphone and have had all the generations. so i think tat my backups are using a lot of diskspace and only want to keep the most recent.so how do i remove old back ups from my itunes?

    If photo stream isn't working, put them in a folder and sync them to you phone by selecting the folder on the Photos tab of your iTunes sync settings and syncing.  Just be aware that if you want to delete them to your phone in the future you will need to sync them off your phone using iTunes as they can't be deleted directly on the phone.

  • Is there a way to remove old responses from the Acrobat Tracker?

    Is there a way to remove old responses from the Tracker if I have deleted the original sources? In other words, Acrobat.com and my desktop are out of sync.How I can get rid of any of these files.

    nvm. I found it.

  • I no longer have access to system folders that allow me to remove old or incorrect PAGES templates. Need to find out how to do that. The only way I can do it now is to blank the template and replace the bad template with a blank.

    I no longer have access to system folders that allow me to remove old or incorrect PAGES templates. Need to find out how to do that. The only way I can do it now is to blank the template and replace the unwanted template with a blank. It was previously possible to go to MY TEMPLATES and remove the unwanted templates. I don't if this issue is before or since installation of 10.8 (a nightmare in my case, which led to significant failure issues).  And because I haven't tried to remove templates since finally managing to install 10.8 (now at 10.8.4), I don't know if this is typical of the newer OS or a problem. I've been a Mac user for more than 25 years, but I think I'm nearing the end of the road. By the way, I've never needed to do this before because the manuals always offered an answer... they don't seem to do that anymore. In any case, I don't know how this works... I'd prefer an email reply if that's possible. But that would probably be too easy, and I don't know how to get a reply.

    Thanks, I appreciate the help.  I think this is one of the problems Apple is creating by changing the OS so often. I had fomer colleagues at [a major aerospace contractor] who told me that so many original files were ultimately lost because of the deadly change in the "Save As" operation that they are now afraid of every OS update. Apple has badly damaged their support base with that very prominent company (they won't update now until they've fully examined and understand changes in the pre-conditioned nature of OS computer functions), and they are a whole lot less enthaled with Mac-related equipment/software. Can't blame them, I too used orginal files that way (as easy-to-use templates), and lost some important files before I realized what was happening (to late to revert). Companies should not have to retrain employees each time an OS gets an update, it's can be very expensive several different ways. They learned a painful lesson with that one. And because I'm now retired and don't use multiple devices, I need iCloud like I need a hole in the head... but I'm told there's no way to keep Apple out of my computer. Fortunately, because of major problems when initially installing Mountain Lion, one hold-over of the hardware/software damage I experienced was that iCloud can no longer access my computer even though everything else is working fine again. That was the only "good luck" I had as a result of that expensive nightmare.

  • How do I remove old applications from my new Macbook Pro that came over when the data on my iMac was migrated to the new computer.

    How do I remove old applications from my new Macbook Pro that were part of the data that was migrated over from my older iMac?
    Thanks

    If the applications were originally drag and drop installations you can simply drag them to the trash and empty. If they were installed by an installer there should be an uninstaller included. If you're not sure you should check with the software developer for instructions. In this case Google can be your friend.

  • How do I remove old music and playlists?

    I tried to remove old music by selecting Sync Music, Selected Playlists etc, And only checked the 3 playlists I wanted. All the playlists got synced. Help!

    If you connect it to your iTunes library and allow a Sync to take place, you should see a message telling you that everything will be removed from the ipod (if you let it Sync). Then, the content of your Library will be added to the iPod (if you have selected those options).

  • Problem removing old versions with customization wizard 8

    I'm trying to deploy Acrobat Reader 8 to our XP Professional desktops via Active Directory software installation (Windows Server 2003 domain)
    I have obtained the MSI release of Reader 8, customised it using Adobe Customization Wizard 8, and deployed it through AD as per the Adobe documentation. This works as expected for new machines without a previous release of Reader installed.
    However for desktops that have Reader 6 or 7 installed, we end up with two versions installed side by side (visible in Add/Remove Programs). Reader 8 works fine at this point. Removing the older version causes the PDF file association that Reader 8 created to be broken, also the Internet Explorer browser plugin is broken. Reader 8 has to be reinstalled manually to fix this issue.
    I have read that Reader automatically removes old versions of itself when you install a new version. Additionally, when customising the MSI, "Remove previous version of Reader" is greyed out. However it appears that the installer is not removing old versions.
    Any ideas as to a solution?
    Thanks a lot
    Tom Fanning

    I have the same problem and i have wasted like 50 hours on this s**t. I'm trying to deploy reader 8 on our 1800 XP workstations with SMS 2003.
    The cutomization tool is totally useless. The only way i have came up with is to create a script wich checks if earlier versions of Adobe reader is installed by looking if the installation folders exists (for example c:\Program Files\Adobe\Acrobat 7.0\Reader ).
    If the installation folders exists, the script would run the uninstallatoin string of the reader using its Windows installer product code, like this:
    MsiExec.exe /x /qn {AC76BA86-7AD7-1035-7B44-A70000000000}
    Now, the problem with the script is that we have several versions of reader 6 and 7 including 3 different languages. The script or the .BAT file would be quite complicated and the testing is allmost impossible.
    I think that it would be much more easier to create a script that deletes all the shotcuts for Adobe reader and then installs a Freeware product for openig PDF files.
    http://www.docu-track.com/home/prod_user/PDF-XChange_Tools/pdfx_viewer
    In my opinion, adobe products are a nightmare for IT admins and their support system is even worse than Microsofts.

  • Can't remove old icloud account

    cant remove old icloud account

    I'm not sure what you mean. If the phone was previously owned by someone else and it is their iCloud account it is impossible for you to remove it. You must contact the previous owner and have them remove the phone from their account.

  • Best way to remove old data from db?

    Hi,
    I am looking some ways to keep my database small and remove old data from database and archive it somewhere else. the data may need to be put back to the database in the future. One of the things I am conserned is how to enforce constraints? In other words, when I remove data, all the related pk/fk data should be removed together. Any suggestions will be greatly appreciated.
    Thanks

    hope this may help u
    concept is : exp/imp & truncate will reclaim the space
    method1
    do an export and secure the dump(say dump1) for future purpose.
    delete the unwanted data.
    commit.
    now again export the tables ( say dump2).
    now do the import(dump2).
    /*now this import will reclaim the the unused space.*/
    method 2
    /* depennded on volume of data */
    -- create backup of existing table for future
    create table backup_table nologging as select * from original_table;
    -- create copy1 of existing table
    create table copy_table nologging as select * from original_table;
    -- truncate the original table, so that highwater mark is reset.
    truncate table original_table;
    -- insert data from copy_table into original table
    insert /*+ APPEND */ into original_table select * copy_table where(ur conditions for data);
    commit all the work.
    /* now u have 3 tables
    backup_table - with all the data - for future reload
    original_table - with unwanted data deleted and space reclaimed.
    copy_table - copy of original table.
    now u drop the copy_table
    drop table copy_table;
    regards

  • [svn:fx-trunk] 14367: remove old version of TLF missed in a previous merge

    Revision: 14367
    Revision: 14367
    Author:   [email protected]
    Date:     2010-02-23 12:02:36 -0800 (Tue, 23 Feb 2010)
    Log Message:
    remove old version of TLF missed in a previous merge
    QE notes: no
    Doc notes: no
    Bugs: no
    Reviewer: no
    Tests run:
    Is noteworthy for integration: no
    Removed Paths:
        flex/sdk/trunk/frameworks/rsls/textLayout_1.0.0.591.swf

    https://discussions.apple.com/message/23488633#23488633
    I started a post here about the same thing.
    Seems GB still has the effects built in, but apple is not allowing us to gain access. They purposly took things away that are allready there,  but why?

  • Can't remove old episodes from iPod sine Update!

    I have a Shuffle & usually carry 3-5 episodes each of 8-10 different podcasts.  Sine installing the new iTunes for Windows, I can't remove old eps from the device, & it's a total crapshoot as to which NEW episodes the system will allow me to click on!!
    HELP!!!!!!

    There are several ways to add podcast episodes to the shuffle, so please correct my assumptions in a reply.  How you add podcasts determines how you remove them.  I can't tell how you do it from the info you provide.
    It sound like you may add podcast episodes manually (drag and drop to iPod).  If you do, and your shuffle is 3rd or 4th (current) gen, you should consider doing it using automatic syncing, by putting podcast episodes on a playlist (in your iTunes library and syncing it to the shuffle).  Update the playlist at any time, by adding new podcast episodes and removing old ones (the shuffle does not need to be connected).  Put the podcast episodes in desired order.  iTunes automatically updates the shuffle the next time it is connected (or by clicking Sync if already connected).  On the shuffle, you can listen to podcasts from that playlist, and hear episodes from different podcasts consecutively, in the desired order.
    When you remove podcast episodes manually, is this the way you do it?  Again, this is for 3rd or 4th gen shuffle.  Select the shuffle in iTunes, so that you see its "management" screen.  In the sidebar, under On My Device, click Podcasts.  To the right, the podcast episodes currently on the shuffle are shown.  Select the one(s) you want to remove an press Delete on the keyboard.

  • Removing old record from nal.db?

    We are using NAL reporting to monitor which applications a user is
    actually using.
    However this data is logged in nal.db, and it's growing and growing.
    How can we remove old data from this database?
    We've made an ODBC connection with ms access, but it won't delete anything.

    Ren,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
    - Check all of the other support tools and options available at
    http://support.novell.com.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://support.novell.com/forums)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://support.novell.com/forums/faq_general.html
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • How do you remove old podcasts?

    How can I remove old podcasts off my itunes and off my ipod?

    To remove podcasts from your iTunes library:
    In the Source List of iTunes, go to the "Podcasts" area under "Library".
    Here, you can select the podcasts that you want to delete, and drag those files to your Recycle Bin, or just click the "Delete" key on your keyboard.
    To remove podcasts from your iPod:
    Connect your iPod to your computer. Click on your iPod in the Source List of iTunes. Go to the "Podcast" tab.
    Here, you will see your podcast syncing settings that you have set up for this iPod.
    If you have already deleted the podcasts that you want to delete from iTunes (and if your iPod is automatically syncing podcasts), then all you need to do is let it sync with your iPod, which would delete those podcasts off your iPod.
    If you have not removed those podcasts from your iTunes library, but you would like them off your iPod, then take a look at your syncing settings.
    If the main "Sync" option for Podcasts is selected, then you can alter whether you want certain recent/unplayed/new/etc. podcasts to go onto your iPod.
    Or, if you have the "Selected podcasts" setting selected, then you can select/deselect what podcasts you want on your iPod using that method.
    -Kylene

Maybe you are looking for

  • Sound issues macbook pro

    Hi I have a MacBook Pro 2011 that  has been working well. It runs OS Lion. Recently after a restart there was no sound and in the settings it said no output device found. This seems to be a common problem. I have tried a few different things unsucces

  • How to create report in BTM

    Hi All, I am using BTM 12.1.0.3 and I want to know how I can create a report for faulted and completed instance in BTM. I referred the oracle document but couldn't achieve my objective. how can I execute command to collect data and then create a repo

  • How to get an application back on the purchases page after deleting it

    Hi All, I bought OS X Mountain Lion on the App Store and while trying to reinstall all softwares after experiencing somes crashes, Montain Lion report an error. After many attempts, I could not reinstall due to an error, so I deleted it from my purch

  • 11g BPEL processes -- How-To for day-to-day monitoring ?

    hi, below are some of the day-to-day activities we typically perform in 11g. how to perform these in 11g? 1. switching off-on BPEL processes. 2. Instantiating BPEL processes on demand.. (In 10g, i use dashboad to say initiate) 3. In 11g, i am able to

  • Essbase excel add-on error after installing IR Studio.

    Hyperion software compatibility issues? Getting Essbase excel add-on error ("Error 1040007 Cannot find message database") after installing Hyperion Interactive Reporting Studio 9.3.1. We are able to consistently reproduce the error on several worksta