HP-UX System Administrator's Guide: Security Management HP-UX 11i v3 (B3921-90020, September 2010)

• An Audit DPMS service module, audit_hpux_raw, that reads raw audit data
collected by the HP-UX auditing system.
• An Audit DPMS service module, audit_hpux_portable, that handles audit
data that is portable across HP-UX systems, and good for retention purpose. Also
a sample script, audit_p2l, that demonstrates how to convert the portable data
into syslog-like messages.
• An Audit DPMS service module, audit_hpux_xml, that converts audit data into
XML format. Also a sample script, audreport_generator, that demonstrates
how to use the auditdp command and the XSLT stylesheets to generate a collection
of web-based audit reports for regulation compliance purposes.
• Sample audit report configuration templates for PCI and SOX that work with the
audreport_generator script.
The following options are available with the auditdp command:
-M module [target]
Write audit data to the target using the specified Audit
DPMS service module. The target is the pathname of a
file where to write the data. The file must not already exist.
If the target is omitted, auditdp writes the audit data to
the standard output.
-O option
Specify the options (case insensitive) to be passed to the
Audit DPMS framework when writing to the target.
-P [target]
Write audit data in portable format. Portable format audit
data can be ported from system to system and is the
recommended format for retention purposes. The target
is the pathname of a file where to write the data. The file
must not already exist. If the target pathname is not
absolute, then the target is assumed to be relative to the
current directory. If the target is omitted, auditdp writes
the audit data to the standard output.
-S filter_file
Selectively process audit data based on the Audit DPMS
configuration file specified in filter_file. Only the
audit data matching the filtering criteria will be included
in the target output.
-X [target]
Write audit data in Extensible Markup Language (XML)
format. The target is the pathname of a file where to write
the data. The file must not already exist. If the target
pathname is not absolute, the pathname is assumed to be
relative to the current directory. If the target is omitted,
auditdp writes the audit data to the standard output.
Applying Extensible Stylesheet Language Transformations
(XSLT) stylesheets to the resulting XML document
generates "human-readable" web-based audit reports.
178 Audit Administration