12.3.1 When converting the latest audit trail file

Use the adbconvertaudittrailfile command to convert the audit trails in the audit trail file, and then output the converted audit trails to the common format audit trail file. This example uses the following procedure for executing the adbconvertaudittrailfile command.

Note that the descriptions of this procedure assume that the output-directory for common format audit trails (/mnt/audittrail/adbcommon/) is already created.

Procedure

Swap the current audit trail file.
Identify the renamed audit trail file.
Execute the adbconvertaudittrailfile command.

Using an example, the following subsections explain each of these steps.

Organization of this subsection

(1) Swapping the current audit trail file
(2) Identifying the renamed audit trail file
(3) Executing the adbconvertaudittrailfile command

(1) Swapping the current audit trail file

Specify the authorization identifier of the HADB user who has the audit admin privilege, and then execute the adbaudittrail --swap command to swap the current audit trail file.

Specification example of the adbaudittrail

adbaudittrail -u ADBAUDITADMIN -p '#HelloHADB_ADMIN' --swap

To Page Top

(2) Identifying the renamed audit trail file

Check the KFAA81401-I message that is output when the current audit trail file is swapped, and identify the path of the renamed audit trail file (the latest audit trail file that can be converted). The path of the renamed audit trail file is underlined in the following example.

KFAA81401-I message output example

KFAA81401-I The file to which the audit trail is output was swapped. 
(file name = /mnt/audittrail/outputarea/audit/adbaud-20180101-123456-789.aud)

To Page Top

(3) Executing the adbconvertaudittrailfile command

adbconvertaudittrailfile
  -u ADBAUDITVIEWER                                                 ...1
  -p '#HelloHADB_VIEWER'                                            ...2
  --common                                                          ...3
  -d /mnt/audittrail/adbcommon/                                     ...4
  /mnt/audittrail/outputarea/audit/adbaud-20180101-123456-789.aud   ...5

Explanation:

Specify the authorization identifier of an HADB user who has the audit viewer privilege.
Specify the password for the authorization identifier of the HADB user.
Specify the --common option.
Specify the path of the output-directory for common format audit trails.
Specify the path (identified as described in (2) Identifying the renamed audit trail file) of the renamed audit trail file.

To Page Top