IBM Security Verify

 View Only
  • 1.  AAC auditing

    Posted Thu August 11, 2022 09:03 AM
    Hello Community.

    I'm working on AAC auditing configuration and I'd like to know if there is a possible configuration to only activate auditing for a specific type of events for example only IBM_SECURITY_AUTHN events. And what about parameters rollover and tuning?

    Thank you

    ------------------------------
    Natascia
    ------------------------------


  • 2.  RE: AAC auditing

    Posted Fri August 12, 2022 04:32 AM
    HI

    At this point. All are enabled as a whole , no option to enable specific event type.
    Usually, its sent to remote rsyslog and from there it can be filtered as required.

    do refer below article:
    https://www.ibm.com/docs/en/sva/10.0.4?topic=auditing-configuring-appliance

    ------------------------------
    Tushar
    Tushar
    ------------------------------