CA Privileged Identity Manager Tech Tip by Shiro Kondo, Senior Support for September 17, 2015
The utility selogmix provides the function of merging / separating seos.audit files, but it has limitation on input file.
When limitation is detected, following error message is output and process is soon terminated.
#################### Errors ######################
rsv ERROR: Cannot set lock on file <file name>
1. Error sample in case of merge.
Input files specified with -l option exceed 2GB, then selogmix output error.
# cd /tmp/audit/merge
# ls -l
-rw------- 1 root root 2147479619 Jun 25 09:44 seos.audit.bak
-rw------- 1 root root 1069 Jun 25 10:00 seos.audit.bak.0
#
# selogmix -m -l seos.audit.bak seos.audit.bak.0 -fn audit.merged
CA ControlMinder selogmix v12.80.0.1432 - audit logs spliter/merger
Copyright (c) 2013 CA. All rights reserved.
#################### Errors ######################
rsv ERROR: Cannot set lock on file /tmp/audit/merge/seos.audit.bak
2. Error sample in case of separate.
Separated size exceeds 2GB, then selogmix output error.
# cd /tmp/audit/split
# ls -l
-rw------- 1 root root 2341745015 Jun 25 13:26 seos.audit.bak.1
#
# selogmix -s -fn seos.audit.bak.1 -l audit_split.1 audit_split.2 -c 1:30
CA ControlMinder selogmix v12.80.0.1432 - audit logs spliter/merger
Copyright (c) 2013 CA. All rights reserved.
#################### Errors ######################
rsv ERROR: Cannot set lock on file /tmp/audit/split/seos.audit.bak.1
#