Hello Community.

I'm working on AAC auditing configuration and I'd like to know if there is a possible configuration to only activate auditing for a specific type of events for example only IBM_SECURITY_AUTHN events. And what about parameters rollover and tuning?

Thank you

------------------------------
Natascia
------------------------------

HI

At this point. All are enabled as a whole , no option to enable specific event type.
Usually, its sent to remote rsyslog and from there it can be filtered as required.

do refer below article:
https://www.ibm.com/docs/en/sva/10.0.4?topic=auditing-configuring-appliance

------------------------------
Tushar
Tushar
------------------------------

Original Message:
Sent: Thu August 11, 2022 09:02 AM
From: Natascia Roia
Subject: AAC auditing

Hello Community.

I'm working on AAC auditing configuration and I'd like to know if there is a possible configuration to only activate auditing for a specific type of events for example only IBM_SECURITY_AUTHN events. And what about parameters rollover and tuning?

Thank you

------------------------------
Natascia
------------------------------