Hello there!
It seems my Solaris 10 audit log file size has been growing rapidly recently. (Daily it is taking up size as big as 2-4GB)
I am not sure how to go about with this, it is taking up resources.
Is it wise to set the limit size (<200mb)
Or what is recommended to do about this situation?
Below is the config I have
+++++++++++++++++++++++++++++++
bash-3.2$ cat /etc/security/audit_control
#
# Copyright (c) 1988 by Sun Microsystems, Inc.
#
# ident "@(#)audit_control.txt 1.4 00/07/17 SMI"
#
dir:/var/audit
flags:lo,ua,fd
minfree:20
naflags:lo,ua,fd
plugin:name=audit_syslog.so; p_flags=lo,ua,fd
+++++++++++++++++++++++++++++++
Thanks for the assistance!