The following procedures are available in the Solaris 10 release and are covered in the System Administration Guide: Security Services.

• Planning for the Auditing Service
• Managing Audit Records
• Specifying What Events Are Audited
• Modifying Default Audit Classes and Events
• Administering Auditing for Non-Global Zones
• Managing the Auditing Service
• Examining Audit Records

• How to Plan Who and What to Audit
• How to Plan Storage for Audit Records
• How to Plan Auditing in Zones

• How to Create Partitions for Audit Files
• How to Modify the audit_control File
• How to Configure the audit_warn Email Alias
• How to Configure syslog Audit Logs
• How to Merge Audit Files From the Audit Trail
• How to Clean Up a not_terminated Audit File
• How to Prevent Audit Trail Overflow

• How to Configure Audit Policy
• How to Modify the audit_control File
• How to Change a User's Audit Characteristics
• How to Audit Changes in Device Policy
• How to Audit Device Allocation
• How to Audit Roles

• How to Add an Audit Class
• How to Change an Audit Event's Class Membership

• How to Plan Auditing in Zones
• How to Configure Audit Policy
• How to Configure All Zones Identically for Auditing
• How to Configure Per-Zone Auditing

• How to Enable the Auditing Service
• How to Disable the Auditing Service
• How to Update the Auditing Service

• How to Display Audit Record Formats
• How to Merge Audit Files From the Audit Trail
• How to Select Audit Events From the Audit Trail
• How to View the Contents of Binary Audit Files
• How to Clean Up a not_terminated Audit File
• How to Prevent Audit Trail Overflow