You can change what CA ControlMinder writes to the audit log in two ways:
Note: You can use the AUDIT property for a GROUP or XGROUP to set the audit property for all members of the group. However, you cannot use the AUDIT property to set the audit mode for group members if a user's audit mode is defined in a USER record, XUSER record, or profile group.
To reduce the number of audit records, you can also control consecutive audit events written to the log file. This customization is based on time interval between consecutive matching audit events (that is, an access to a resource with the same process ID, thread ID, rule ID, user ID, and access mask). The time interval, in seconds, can be set by setting the value of the AuditRefreshPeriod registry entry. By default, the AuditRefreshPeriod is set to zero (0), which means that all events are written to the log file.
Copyright © 2013 CA Technologies.
All rights reserved.
|
|