Installing and setting up auditing

1. Install auditing.

Set the number of audit tables and assign devices for the audit trail and the syslogs transaction log in the sybsecurity database.

“Installing the audit system” and the Adaptive Server installation and configuration documentation

2. Set up audit trail management.

Write and establish a threshold procedure that receives control when the current audit table is nearly full. The procedure automatically switches to a new audit table and archives the contents of the current table.

In addition, this step involves setting the audit queue size and the suspend audit when device full configuration parameters.

“Setting up audit trail management”

For single-table auditing, “Single-table auditing”

3. Set up transaction log management in the sybsecurity database.

Determine how to handle the syslogs transaction log in the sybsecurity database, how to set the trunc log on chkpt database option and establishing a last-chance threshold procedure for syslogs if trunc log on chkpt is off.

“Setting up transaction log management”

4. Set auditing options.

Use sp_audit to establish the events to be audited.

“Setting global auditing options”

5. Enable auditing.

Use sp_configure to turn on the auditing configuration parameter. Adaptive Server begins writing audit records to the current audit table.

“Enabling and disabling auditing”

6. Restarting auditing.

Use sp_audit restart to restart auditing if it fails.

“Restarting auditing”