Overview of the auditing subsystem

Overview of the auditing subsystem

This material contains an overview of the auditing subsystem. It describes in general terms:

the purpose of auditing
how the auditing subsystem works
the events mechanism
the audit event log file
default settings and tunable parameters
the auditing commands

This material is intended to give you a high-level understanding of the features of the auditing subsystem and their interactions. In most cases, it does not contain detailed technical information. Instead, you are referred to more detailed information located elsewhere.