Using the Audit Manager

Managing audit files and directories

Audit data is divided into sessions, with a new session started each time auditing is stopped and started once again. Audit data is examinined or manipulated by session number.

These tasks are related to file management:

An audit session consists of a session log file and a group of compaction files generated between an enable and disable of the audit subsystem. Each collection file and compaction file created during a session is uniquely numbered with the session in which it was created. When sessions are completed, only the log file and the compaction files remain. The file maintenance functions examine which sessions are still on the system and let you remove sessions no longer wanted.